NOCC Webmail 1.0 stores e-mail attachments in temporary files with predictable filenames, which makes it easier for remote attackers to execute arbitrary code by accessing the e-mail attachment via directory traversal vulnerabilities.
| Software | From | Fixed in |
|---|---|---|
| nocc / nocc | 1.0 | 1.0.x |