| Package | Affected versions | Patched versions |
|---|---|---|
| u-mail webmail server | = 4.91 |
webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web document root.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free