Directory Traversal Flaw in MailWatch for MailScanner
CVE-2008-5991
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-5991?
A directory traversal vulnerability exists in the docs.php file of MailWatch for MailScanner versions 1.0.4 and earlier. This flaw allows remote attackers to manipulate the doc parameter using a .. (dot dot) sequence, enabling them to include and execute arbitrary local files. The exploitation of this vulnerability poses significant risks as attackers can gain unauthorized access to sensitive information on the server.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.