VULNERABILITY INTELLIGENCE

CVE-2008-4932

CVSS score9 HIGH
EPSS probability5.52%
CISA KEVNot currently listed
Published2008-11-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web document root.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references