CVE-2015-0911

CVE-2015-0911 affects TransmitMail (PHP-based mail form) versions 1.0.11 through 1.5.8. The root cause is an issue in processing file names that enables a directory traversal (CWE-22) vulnerability, allowing a remote attacker to read arbitrary files on the server via attachment handling vectors. ...