Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Source prior to 1.05 allow remote malicious users to read arbitrary files via a .. (dot dot) in the Attachment[] parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
atmail atmail open |