Security Advisory

CVE-2005-0332

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-02-10 05:00:00

Last updated 2024-08-07 21:13:53

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do.

← Browse all CVEs View on cve.org ↗