CVE-2006-4955: Undefined Security Weakness

Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. dot dot sequence in the 1 savefolder and 2 savefilename parameters...

NeoSys Neon Webmail for Java 5.065.07 - downloadfile Servlet Traversal Arbitrary File Access

NeoSys Neon Webmail for Java 5.065.07 - downloadfile Servlet Traversal Arbitrary File Access...