VULNERABILITY INTELLIGENCE
CVE-2002-2331
CVSS score5.8 MEDIUM
EPSS probability2.08%
CISA KEVNot currently listed
Published2002-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N
Description
W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by sending code in MIME attachments, then requesting the attachments.