Description
send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded.
Unscored
CVE-2002-0410
EUVD-2002-0407GHSA-xv2v-3fj4-g6xm
send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via…
Published Jun 11, 2002 · Updated Aug 8, 2024 · Assigned by mitre