CVE-2008-4932

EPSS 5.5%

webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web document root.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6898unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/32540 http://securityreason.com/securityalert/4565 https://exchange.xforce.ibmcloud.com/vulnerabilities/46300 https://www.exploit-db.com/exploits/6898 http://www.securityfocus.com/archive/1/497961/100/0/threaded http://www.securityfocus.com/bid/32013