Unrated severityNVD Advisory· Published Sep 23, 2006· Updated Jun 16, 2026
CVE-2006-4951
CVE-2006-4951
Description
Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by sending an e-mail message with a JSP file attachment, which is stored under the web root with a predictable filename.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*+ 1 more
- cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*
- cpe:2.3:a:neosys:neon_webmail:5.07:*:java:*:*:*:*:*
- Range: <5.08
Patches
Vulnerability mechanics
References
5- secunia.com/advisories/22029nvdPatchVendor Advisory
- vuln.sg/neonmail506-en.htmlnvdExploitPatch
- www.securityfocus.com/bid/20109nvdExploitPatch
- www.securityfocus.com/bid/84198nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/29086nvd
News mentions
0No linked articles in our index yet.