VYPR

U Mail Webmail Server

by Comingchina

CVEs (1)

  • CVE-2008-4932Nov 5, 2008
    risk 0.04cvss epss 0.11

    webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web document root.