Vendors / Cascadesoft Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Cascadesoft records in CISA KEV No Cascadesoft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 33
Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files via a ..
CVSS 2.0 MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.02366 · Published 2007-11-01 · No fix listed CWE-22
Priority LOW 30
W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute…
CVSS 2.0 MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.02075 · Published 2007-10-26 · No fix listed CWE-16
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0