5.8

CVE-2002-2331

EPSS 2.08%
Veröffentlicht 31.12.2002 05:00:00
Zuletzt bearbeitet 16.06.2026 22:01:06
Erkennungen
Login

W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by sending code in MIME attachments, then requesting the attachments.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cascadesoft ≫ W3mail Version 1.0.2

Cascadesoft ≫ W3mail Version 1.0.3

Cascadesoft ≫ W3mail Version 1.0.4

Cascadesoft ≫ W3mail Version 1.0.5

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.08%	0.791

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://online.securityfocus.com/archive/1/284232

http://www.iss.net/security_center/static/9680.php

http://www.securityfocus.com/bid/5314

https://nvd.nist.gov/vuln/detail/CVE-2002-2331

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-2331

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-2331

EUVD