Lucene search
PRIOn knowledge basePRION:CVE-2012-1917HistoryMar 27, 2012 - 7:55 p.m.
Directory traversal
2012-03-2719:55:00
PRIOn knowledge base
www.prio-n.com
1
compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle …/ (dot dot slash) sequences in the unique parameter, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a …/./ (dot dot dot slash dot slash) sequence.
| CPE | Name | Operator | Version |
|---|---|---|---|
| atmail_open | le | 1.04 |
Related
cvelist
cvelist
CVE-2012-1917
2012-03-27 19:00:00
cve
cve
CVE-2012-1917
2012-03-27 19:55:02
nvd
nvd
CVE-2012-1917
2012-03-27 19:55:02