Published: 05/11/2008 Updated: 11/10/2018

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

VMScore: 905

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote malicious users to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web document root.

Vulnerable Product	Search on Vulmon	Subscribe to Product
comingchina u-mail webmail server 4.91

U-Mail Webmail Arbitrary File Write Vulnerability ================================================== Vulnerable: U-Mail 491 Vendors: wwwcomingchinacom Category: Input Validation Error Impact: An attacker can write arbitrary data to new files Author: Shennan Wang Date: 2008-10-30 Web: hibaiducom/nansec Details: ========= ...

CWE-20 http://www.securityfocus.com/bid/32013 http://securityreason.com/securityalert/4565 http://secunia.com/advisories/32540 https://exchange.xforce.ibmcloud.com/vulnerabilities/46300 https://www.exploit-db.com/exploits/6898 http://www.securityfocus.com/archive/1/497961/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/6898/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-4932

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect