CVE-2012-1918

CVE-2012-1918 describes multiple directory traversal vulnerabilities in the @Mail WebMail Client, specifically affecting AtMail Open-Source versions prior to 1.05. Attackers can exploit these flaws by manipulating the Attachment[] parameter in compose.php and libs/Atmail/SendMsg.php to read arbitrary files on the server. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having a low attack complexity, potentially leading to information disclosure. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.