CVE-2015-9277

creationtimestamp| type| source ---|---|--- 2019-01-16 18:57:21+00:00| seen| https://t.me/cibsecurity/2072...

CVE-2015-9277

MailEnable before 8.60 is affected by a directory traversal due to mishandling of /../ and /.. / sequences, allowing an attacker to read other users’ messages and potentially upload and delete files. Affected product: MailEnable (before 8.60). Root cause: improper normalization of path traversal ...