smartermail 7.1.3876 - Directory Traversal vulnerability

No description provided by source...

CVE-2010-3486

Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbitrary files via a 1 ../ dot dot slash, 2 %5C encoded backslash, or 3 %255c double-encoded backslash in the name parameter...

SmarterMail 7.1.3876 Directory Traversal

Vendor: smartertools.com SmarterMail 7.x 7.1.3876 | Bug : Directory Traversal, OS Command Injection, Other Critcal Vulns Vendor: smartertools.com SmarterMail 7.x 7.1.3876 Date: 2010-09-12 Author : sqlhacker – http://cloudscan.me Thanks to : Burp Suite Pro - engagement tool : FuzzDB Contact :...