CVE-2010-5334

IceWarp Webclient before 10.2.1 contains a directory traversal vulnerability. Input passed via the _c parameter to basic/index.html is not properly sanitised, allowing reading arbitrary files on the IceWarp Mailserver or host OS. Affected: IceWarp Webclient prior to 10.2.1; impact described as po...