CVE-2008-0333

The CVE-2008-0333 issue concerns AfterLogic MailBee WebMail Pro for ASP.NET (version 4.1) where a directory traversal flaw in download_view_attachment.aspx allows reading arbitrary files via .. in the temp_filename parameter. Root cause: unvalidated input in the downloadViewAttachment endpoint en...