Search/CVE-2001-1408
● CVE

CVE-2001-1408

VendorcobaltProductqube, webmailDiscoveredJul 5, 2001UpdatedApr 16, 2026

Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the mailbox parameter.

CVSS v3.1
—
EPSS
8.10%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
2 relationships
Timeline
disclosure → media coverage
Jul 5, 2001
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026