CVE-2005-0845

CVE-2005-0845 concerns SurgeMail 2.2g3, where a directory traversal in the Webmail interface, via the attach_id parameter, permits remote authenticated users to write arbitrary files or directories. The underlying issue is improper validation of the dot-dot (.. ) path segment, enabling access out...