Ipswitch : Security Vulnerabilities, CVEs, Published In 2008 (Directory traversal)
Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. (dot dot) in the recipient field.
Max CVSS
4.9
EPSS Score
1.05%
Published
2008-02-25
Updated
2018-10-15
1 vulnerabilities found