| Package | Affected versions | Patched versions |
|---|---|---|
| neon webmail | = 5.06= 5.07 |
Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by sending an e-mail message with a JSP file attachment, which is stored under the web root with a predictable filename.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free