CVE

Id
35049  
CVE No.
CVE-2008-4932  
Status
Candidate  
Description
webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web document root.  
Phase
Assigned (20081105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
383517 35049 CVE-2008-4932 BUGTRAQ:20081031 U-Mail Webmail "edit.php" Arbitrary File Write Vulnerability  View
383518 35049 CVE-2008-4932 URL:http://www.securityfocus.com/archive/1/archive/1/497961/100/0/threaded  View
383519 35049 CVE-2008-4932 MILW0RM:6898  View
383520 35049 CVE-2008-4932 URL:http://milw0rm.com/exploits/6898  View
383521 35049 CVE-2008-4932 BID:32013  View
383522 35049 CVE-2008-4932 URL:http://www.securityfocus.com/bid/32013  View
383523 35049 CVE-2008-4932 SECUNIA:32540  View
383524 35049 CVE-2008-4932 URL:http://secunia.com/advisories/32540  View
383525 35049 CVE-2008-4932 SREASON:4565  View
383526 35049 CVE-2008-4932 URL:http://securityreason.com/securityalert/4565  View
383527 35049 CVE-2008-4932 XF:umail-edit-file-upload(46300)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48295 JVNDB-2008-003605 mgetty の faxspool における任意のファイルを上書きされる脆弱性 mgetty の faxspool には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-4936 35049 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003605.html  View