CVE-2012-1918: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in 1 compose.php and 2 libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allow remote attackers to read arbitrary files via a .. dot dot in the Attachment parameter...

PT-2012-3651

Name of the Vulnerable Software and Affected Versions AtMail Open-Source versions prior to 1.05 Description The issue concerns multiple directory traversal vulnerabilities. These vulnerabilities are located in the compose.php and libs/Atmail/SendMsg.php files of the @Mail WebMail Client in AtMail...