CVE-2006-0818

CVE-2006-0818 describes an absolute path directory traversal/remote file inclusion in IceWarp/Merak/VisNetic webmail that allows remote unauthenticated? Actually Secunia states remote access and authentication not required for some; the vulnerability is exploitable by authenticated or remote user...

CVE-2006-0818

Absolute path directory traversal vulnerability in 1 MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and 2 VisNetic MailServer before 8.5.0.5 allows remote authenticated users to include arbitrary files via a modified language parameter and a full Windows or UNC pathname i...