5.8

CVE-2002-2331

W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by sending code in MIME attachments, then requesting the attachments.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cascadesoft ≫ W3mail Version1.0.2
Cascadesoft ≫ W3mail Version1.0.3
Cascadesoft ≫ W3mail Version1.0.4
Cascadesoft ≫ W3mail Version1.0.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.9% 0.77
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://online.securityfocus.com/archive/1/284232
http://www.iss.net/security_center/static/9680.php
http://www.securityfocus.com/bid/5314