CVE-2023-40747

A directory traversal vulnerability exists in the CGIs included in the Internal Simple Webserver of A.K.I Software's PMailServer and PMailServer2 products. This flaw allows a remote attacker to access arbitrary files outside the DocumentRoot . For PMailServer2 prior to Version 2.51a, users should...

CVE-2023-40747

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot...

CVE-2023-40747

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot...

CVE-2023-40160

A directory traversal vulnerability (CWE-22) exists in the Mailing List Search CGI (pmmls.exe) component of A.K.I Software's PMailServer and PMailServer2 products. A remote attacker can exploit this flaw to obtain arbitrary files on the server. For PMailServer2 , users should apply the update fil...

CVE-2023-39933

Insufficient verification vulnerability exists in Broadcast Mail CGI pmc.exe included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web server's execution...

CVE-2023-39933

Insufficient verification vulnerability exists in Broadcast Mail CGI pmc.exe included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web server's execution...

CVE-2023-39933

A security vulnerability exists in the Broadcast Mail CGI (pmc.exe) component of A.K.I Software's PMailServer and PMailServer2 products. The root cause is insufficient verification (CWE-434), which could allow a user capable of uploading files to execute an arbitrary executable file with the web ...

CVE-2023-39223

A stored cross-site scripting (XSS) vulnerability (CWE-79) exists in the CGIs of A.K.I Software's PMailServer and PMailServer2 products. If exploited, an attacker can execute arbitrary scripts on a logged-in user's web browser. Affected components include pmam.exe (specifically in PMailServer Fre...

CVE-2023-39223

Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2023-39223: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2023-40747: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot...

CVE-2023-39933: Unrestricted Upload of File with Dangerous Type

Insufficient verification vulnerability exists in Broadcast Mail CGI pmc.exe included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web server's execution...

Multiple vulnerabilities in CGIs of PMailServer and PMailServer2

Overview CGIs included with PMailServer and PMailServer2 provided by A.K.I Software contain multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2023-39223 Insufficient verification vulnerability in Broadcast Mail CGI pmc.exe CWE-434 - CVE-2023-39933...

JVN#92720882: Multiple vulnerabilities in CGIs of PMailServer and PMailServer2

CGIs included with PMailServer and PMailServer2 provided by A.K.I Software contain multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2023-39223 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVS...