Description
Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string.
References
- http://www.acmailer.jp/info/de.cgi?id=58
- JVN#64051989 third-party-advisory
- JVNDB-2015-000098 third-party-advisory