CVE-2009-3124

CVE-2009-3124 describes a directory traversal vulnerability in QuarkMail's get_message.cgi that allows an attacker to read arbitrary files by injecting a .. in the tf parameter. Multiple connected sources (Red Hat, NVD, CVE records, and related feeds) reiterate that the flaw affects QuarkMail and...