CVE-2008-5991

Name of the Vulnerable Software and Affected Versions MailWatch for MailScanner version 1.0.4 and earlier

Description The issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) in the doc parameter of the docs.php file, enabling directory traversal.

Recommendations For MailWatch for MailScanner version 1.0.4 and earlier, consider restricting access to the docs.php file until a patch is available. As a temporary workaround, avoid using the doc parameter in the affected endpoint.