Unrated severityNVD Advisory· Published Sep 23, 2006· Updated Apr 16, 2026
CVE-2006-4952
CVE-2006-4952
Description
The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between different mail folders, specified by the folderid and tofolderid parameters, via the ID parameter.
Affected products
2cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*+ 1 more
- cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*
- cpe:2.3:a:neosys:neon_webmail:5.07:*:java:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- secunia.com/advisories/22029nvdPatchVendor Advisory
- vuln.sg/neonmail506-en.htmlnvdExploitPatch
- www.securityfocus.com/bid/20109nvdExploitPatch
- www.securityfocus.com/bid/84202nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/29087nvd
News mentions
0No linked articles in our index yet.