CVE-2002-2331

CVE-2002-2331 describes a vulnerability in W3Mail versions 1.0.2 through 1.0.5 where, if server-side scripting (SSI) is enabled in the attachments directory, remote attackers can execute arbitrary code. This is achieved by uploading malicious code within MIME attachments, which is then executed when the attachments are requested. The vulnerability has a CVSS score of 5.8, indicating a medium severity with a network attack vector and medium attack complexity, potentially leading to partial confidentiality and integrity compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.