Mailreader.com : Security Vulnerabilities, CVEs, Published In 2004
compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi.
Max CVSS
10.0
EPSS Score
1.42%
Published
2004-12-06
Updated
2008-09-05
Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via .. (dot dot) sequences and a null byte (%00) in the configLanguage parameter.
Max CVSS
5.0
EPSS Score
1.62%
Published
2004-12-06
Updated
2011-03-08
2 vulnerabilities found