CVE-2015-0911

Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling...

CVE-2015-0910

CVE-2015-0910 affects TAGAWA Takao TransmitMail (PHP-based mail form). The vulnerability is a cross-site scripting (CWE-79) flaw in the handling of file names, allowing an attacker to cause arbitrary script execution in a victim’s browser. Affected versions are 1.0.11 through 1.5.8. Root cause: p...

CVE-2015-0911: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling...

CVE-2015-0910: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to inject arbitrary web script or HTML via a crafted filename...