ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying the full path of the target file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Slwebmail | Bvrp_software | 3.0 (including) | 3.0 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=105232436210273\u0026w=2
- http://marc.info/?l=ntbugtraq\u0026m=105233363721919\u0026w=2
- http://www.nextgenss.com/advisories/slwebmail-vulns.txt
- http://marc.info/?l=bugtraq\u0026m=105232436210273\u0026w=2
- http://marc.info/?l=ntbugtraq\u0026m=105233363721919\u0026w=2
- http://www.nextgenss.com/advisories/slwebmail-vulns.txt