CVE-2006-0332

Ecartis 1.0.0 snapshot 20050909 - Unauthenticated Arbitrary File Upload via Pantomime

Title source: llm
STIX 2.1

Description

Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may allow remote attackers to upload arbitrary files.

References (6)

Core 6
Core References
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=listar-dev&m=113770802408358&w=2
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18524
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0260
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=listar-dev&m=113732552708625&w=2
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16317
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24220

Scores

EPSS 0.0149
EPSS Percentile 71.0%

Details

CWE
CWE-94
Status published
Products (1)
ecartis/ecartis 1.0.0_snapshot_2005-09-09
Published Jan 21, 2006
Tracked Since Feb 18, 2026