Security Advisory

CVE-2009-3124

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-09-09 22:00:00
Last updated 2024-09-17 02:15:48
Assigner mitre
State PUBLISHED

Description

Directory traversal vulnerability in get_message.cgi in QuarkMail allows remote attackers to read arbitrary files via a .. (dot dot) in the tf parameter.