296,202
Total vulnerabilities in the database
send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded.
| Software | From | Fixed in |
|---|---|---|
| aeromail / aeromail | 1.30 | 1.30.x |
| aeromail / aeromail | 1.26 | 1.26.x |
| aeromail / aeromail | 1.20 | 1.20.x |
| aeromail / aeromail | 1.40 | 1.40.x |
| aeromail / aeromail | 1.02 | 1.02.x |
| aeromail / aeromail | 1.10 | 1.10.x |