Artica < 1.4.101900 mailattach Parameter Directory Traversal

The installed version of Artica fails to sanitize user-supplied input to the 'mailattach' parameter of the 'images.listener.php' script. By prefixing directory traversal strings such as '....//' to the 'mailattach' parameter a remote, unauthenticated attacker could exploit this vulnerability to...

Artica mailattach Parameter Directory Traversal

The installed version of Artica fails to sanitize user-supplied input to the 'mailattach' parameter of the 'images.listener.php' scrip. By prefixing directory traversal strings such as '../' to the 'mailattach' parameter a remote, unauthenticated attacker could exploit this vulnerability to read...