Cascadesoft W3mail
2 CVEs affecting Cascadesoft W3mail. Latest disclosed: 2002-12-31. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2002-2399 | | 2002-12-31 | Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file paramete… | |
CVE-2002-2331 | | 2002-12-31 | W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uplo… |