https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 16:02:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-105727 EUVD-2026-105727 https://cve.radiocsirt.org/vuln/euvd-2026-105727 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1904 <p>Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the _value parameter for the generic_message_footer setting in a save-perf action to index.php, as exploited in the wild in March 2013.</p> <p>Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the _value parameter for the generic_message_footer setting in a save-perf action to index.php, as exploited in the wild in March 2013.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-1904 https://cve.radiocsirt.org/vuln/ghsa-xhjq-9gfc-7x74 <p>Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the _value parameter for the generic_message_footer setting in a save-perf action to index.php, as exploited in the wild in March 2013.</p> <p>Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the _value parameter for the generic_message_footer setting in a save-perf action to index.php, as exploited in the wild in March 2013.</p> https://cve.radiocsirt.org/vuln/ghsa-xhjq-9gfc-7x74 https://cve.radiocsirt.org/vuln/gsd-2013-1904 gsd-2013-1904 https://cve.radiocsirt.org/vuln/gsd-2013-1904