NOCC Webmail 1.0 stores e-mail attachments in temporary files with predictable filenames, which makes it easier for remote attackers to execute arbitrary code by accessing the e-mail attachment via directory traversal vulnerabilities.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Nocc | Nocc | 1.0 (including) | 1.0 (including) |