CVE-2008-4932

webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web document root.

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

5.52% chance of exploitation in the next 30 days, 92th percentile

Published

2008-11-05

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/6898

References

• CVE Record
• NVD entry

Related

• CVE-2008-4931
• CVE-2008-4999
• CVE-2008-4926
• CVE-2008-5000
• CVE-2008-4925
• CVE-2008-5002