CVE-2012-1917

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) sequences in the unique parameter, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ..././ (dot dot dot slash dot slash) sequence.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://atmail.org/download/atmailopen.tgzPatch
http://en.securitylab.ru/lab/PT-2011-48
http://secunia.com/advisories/47012
http://www.kb.cert.org/vuls/id/743555US Government Resource
http://atmail.org/download/atmailopen.tgzPatch
http://en.securitylab.ru/lab/PT-2011-48
http://secunia.com/advisories/47012
http://www.kb.cert.org/vuls/id/743555US Government Resource

Timeline

Published: Mar 27, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-19185.0Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Sourc CVE-2012-19196.4CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to conduct direct CVE-2012-19205.0@Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request CVE-2012-19216.8Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the auth CVE-2012-19226.8Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the authentication of admini CVE-2012-19232.1RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local CVE-2012-19246.8Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window fo CVE-2012-19256.8Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote CVE-2012-19265.0Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState funct CVE-2012-19276.4Opera before 11.62 allows remote attackers to spoof the address field by triggering the launch of a dialog window associated with a differen CVE-2012-19286.4Opera before 11.62 allows remote attackers to spoof the address field by triggering a page reload followed by a redirect to a different doma CVE-2012-19296.4Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styling that causes page