QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2012-1919

Back to search

CVE-2012-1919

Published: Mar 27, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to conduct directory traversal attacks and read arbitrary files via a %0A sequence followed by a .. (dot dot) in the file parameter.

VendorProductVersions

n/a

n/a

affected
n/a

References

VU#743555
third-party-advisory
x_refsource_CERT-VN
47012
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now