PT-2014-2518

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 0.7.3 Roundcube Webmail versions 0.8.x prior to 0.8.6 Description The issue allows remote attackers to read arbitrary files via a full pathname in the value parameter for the generic message footer setting i...

VulnCheck KEV: CVE-2013-1904

Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the value parameter for the genericmessagefooter setting in a save-perf action to index.php, as exploite...