7.5
CVSSv2

CVE-2008-5991

Published: 28/01/2009 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and previous versions allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the doc parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

mailwatch mailwatch 0.4

mailwatch mailwatch 0.3

mailwatch mailwatch 0.5.1

mailwatch mailwatch 0.5

mailwatch mailwatch

mailwatch mailwatch 1.0.3

mailwatch mailwatch 1.0.2

mailwatch mailwatch 1.0

Exploits

:::::::- :::::: ::: ;;, `';, ;; ;;;`;;;;, `;;; `[[ [[[[' [[[ [[[[[ '[[ $$, $$$$ $$$ $$$ "Y$c$$ 888_,o8P'88 d888 888 Y88 MMMMP"` "YmmMMMM"" MMM YM [ Discovered by dun \ dun[at]strcpypl ] ################################################################## # [ mailwatc ...