Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-4955. PoCs published by Tan Chew Keong.
AI-analyzed exploit summary The provided text describes multiple vulnerabilities in Neon WebMail, including directory traversal, SQL injection, and file upload issues. It outlines potential attack vectors but does not include functional exploit code.
Description
Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the (1) savefolder and (2) savefilename parameters.
Exploits (1)
The provided text describes multiple vulnerabilities in Neon WebMail, including directory traversal, SQL injection, and file upload issues. It outlines potential attack vectors but does not include functional exploit code.