VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 11, 2007· Updated Jun 16, 2026

CVE-2007-3702

CVE-2007-3702

Description

Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the archives parameter in a Load action.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Mail Machine/Mail Machine6 versions
    cpe:2.3:a:mail_machine:mail_machine:3.980:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:mail_machine:mail_machine:3.980:*:*:*:*:*:*:*
    • cpe:2.3:a:mail_machine:mail_machine:3.985:*:*:*:*:*:*:*
    • cpe:2.3:a:mail_machine:mail_machine:3.987:*:*:*:*:*:*:*
    • cpe:2.3:a:mail_machine:mail_machine:3.988:*:*:*:*:*:*:*
    • cpe:2.3:a:mail_machine:mail_machine:3.989:*:*:*:*:*:*:*
    • (no CPE)range: <=3.989

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.