CVE-2008-4932: Comingchina U-Mail Webmail Server

High severity, CVSS 9.0. EPSS: 5.5% chance of exploitation in the next 30 days.

webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web document root.

Affected products

• Comingchina U-Mail Webmail Server: version 4.91 only

Published 2008-11-05. Last modified 2026-06-16.