3 matches found
CVE-2004-1205
CVE-2004-1205 affects pnTresMailer 6.03, via codebrowserpntm.php and an invalid filetohighlight parameter that causes an error message to disclose the full file path. This is an information-disclosure vulnerability that can enable an attacker to learn sensitive path details. Public sources (NVD/N...
CVE-2004-1206: Undefined Security Weakness
Directory traversal vulnerability in codebrowserpntm.php in pnTresMailer 6.0.3 allows remote attackers to read arbitrary files via a .. dot dot in the filetodownload parameter...
CVE-2004-1205: Undefined Security Weakness
codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohighlight parameter, which reveals the full path in an error message...