VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 28, 2009· Updated Apr 23, 2026

CVE-2008-5991

CVE-2008-5991

Description

Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the doc parameter.

Affected products

8
  • Mailwatch/Mailwatch8 versions
    cpe:2.3:a:mailwatch:mailwatch:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:mailwatch:mailwatch:*:*:*:*:*:*:*:*range: <=1.0.4
    • cpe:2.3:a:mailwatch:mailwatch:0.3:beta:*:*:*:*:*:*
    • cpe:2.3:a:mailwatch:mailwatch:0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:mailwatch:mailwatch:0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:mailwatch:mailwatch:0.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mailwatch:mailwatch:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mailwatch:mailwatch:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mailwatch:mailwatch:1.0.3:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.