VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 11, 2007· Updated Apr 23, 2026

CVE-2007-3702

CVE-2007-3702

Description

Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the archives parameter in a Load action.

Affected products

5
  • Mail Machine/Mail Machine5 versions
    cpe:2.3:a:mail_machine:mail_machine:3.980:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:mail_machine:mail_machine:3.980:*:*:*:*:*:*:*
    • cpe:2.3:a:mail_machine:mail_machine:3.985:*:*:*:*:*:*:*
    • cpe:2.3:a:mail_machine:mail_machine:3.987:*:*:*:*:*:*:*
    • cpe:2.3:a:mail_machine:mail_machine:3.988:*:*:*:*:*:*:*
    • cpe:2.3:a:mail_machine:mail_machine:3.989:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.