Description
accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter.
References
- merak-icewarp-create-file(17317) vdb-entry
- 20040910 Multiple vulnerabilities in Icewarp Web Mail 5.2.7 mailing-list
- 12789 third-party-advisory
- 11371 vdb-entry