Approved changes feed: RSS · Atom

cpe:2.3:a:endymion:sake_mail:1.0.20:*:*:*:*:*:*:*

part: a version: 1.0.20 update: *

VendorEndymion (076f7bb1-49ed-5a49-bc8a-3fcbb4b40a73)
ProductSake Mail (61a09295-3296-5c37-afa0-9c9458ca4dc9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-0418 vulnerable 2026-06-08 04:46:21.404280 Details available
Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:49:28.479Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.