CVE:CVE-2002-2399
CNNVD:CNNVD-200212-689
W3Mail 1.0.6 版本的viewAttachment.cgi存在目录遍历漏洞。远程攻击者借助file参数的 .. (点 点)读取任意文件。
solution:Upgrade cascadesoft w3mail to a higher version than 1.0.6,and avoid the version 1.0.6