Vulnerability in Neosys Neon Webmail

CVE-2006-4952

The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between different mail folders, specified by the folderid and tofolderid parameters, via the ID parameter.

EPSS: 0.078 (94.0th percentile) — read the EPSS interpretation.

Affected products

Neosys Neon_webmail — versions 5.06, 5.07
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, Patch, x_refsource_MISC)
cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)