Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a ".." (dot dot) in the Attachments parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WorldClient任意文件可删除漏洞
Vulnerability Description
WorldClient是一款集成于MDaemon邮件服务器的WEB接口，可使用于Microsft Windows操作系统下。 WorldClient对用户提交的输入数据缺少正确充分的检查，可导致远程攻击者可删除系统上任意文件。 当建立新的邮件信息时，用户可以夹带附件，附件存储在用户文件夹中，由于WorldClient在删除附件操作时没有对用户提交的数据进行正确检查，攻击者可以提交包含"../"的特殊数据导致脱离用户文件夹的限制，而以MDaemon进程权限删除系统上任意文件。
CVSS Information
N/A
Vulnerability Type
N/A