Description
Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary locations via a .. (dot dot) in the unique parameter.
References
- 16470 vdb-entry
- @mail-compose-directory-traversal(24459) vdb-entry
- http://kb.atmail.com/view_article.php?num=374
- ADV-2006-0415 vdb-entry
- 18646 third-party-advisory
- 22882 vdb-entry