CVE-2008-0333

Опубликовано: 17 янв. 2008

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the temp_filename parameter.

Ссылки

http://secunia.com/advisories/28521
Not Applicable
http://www.securityfocus.com/bid/27312
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39724
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/4921
Exploit
Third Party Advisory
VDB Entry
http://secunia.com/advisories/28521
Not Applicable
http://www.securityfocus.com/bid/27312
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39724
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/4921
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:afterlogic:mailbee_webmail_pro:4.1:*:*:*:*:asp.net:*:*

EPSS

Процентиль: 91%

0.07038

Низкий

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-v7f2-x42c-c3gv

github

почти 4 года назад