CVE-2018-7705: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitrary recipients via a .. dot dot in the filename parameter to secupload2/upload.aspx...

PT-2018-18224

Name of the Vulnerable Software and Affected Versions: SecurEnvoy SecurMail versions prior to 9.2.501 Description: The issue allows remote authenticated users to read e-mail messages to arbitrary recipients. This is achieved by using a .. dot dot in the filename parameter to the...