CVE-2022-21193

CVE-2022-21193 affects TransmitMail (PHP-based mail form) with a directory traversal in versions 2.5.0–2.6.1 and an additional cross-site scripting issue per JVN/RH/UVD entries. The root cause is improper validation of external input (CWE-22), enabling a remote unauthenticated attacker to obtain ...

CVE-2022-21193

Directory traversal vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to obtain an arbitrary file on the server via unspecified vectors...