Matthias Kilian

**Name of the Vulnerable Software and Affected Versions** Ecartis version 1.0.0 snapshot 20050909 **Description** The issue allows remote attackers to upload arbitrary files due to e-mail attachments being stored in a publicly accessible directory. **Recommendations** For Ecartis version 1.0.0 snapshot 20050909, consider restricting access to the directory where e-mail attachments are stored to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.