Threats tagged 'ghsa-6rhc-3jj8-rcqx'

Usermin versions up to 2.570 have a path traversal vulnerability in the mailbox/detachall.cgi script. This flaw allows remote unauthenticated attackers to write files outside the intended temporary directory by exploiting unsanitized attachment filenames containing '../' sequences. By sending specially crafted email attachments and triggering the download of all attachments, attackers can overwrite critical files such as ~/.forward, potentially enabling command execution on the affected system.