69 matches found
CVE-2018-5700
Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copyfolderfile call in inc/class.ftpfolder.php to move a .php file from the FTP folder into a web folder...
CVE-2018-5700
Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copyfolderfile call in inc/class.ftpfolder.php to move a .php file from the FTP folder into a web folder...
CVE-2018-5700
Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copyfolderfile call in inc/class.ftpfolder.php to move a .php file from the FTP folder into a web folder...
CVE-2018-5700
Winmail Server (versions up to 6.2) is affected by CVE-2018-5700 through a directory traversal in netdisk.php (copy_folder_file) that allows authenticated users to move a PHP file from the FTP folder into a web folder, enabling remote code execution. OpenVAS notes a vulnerability in Winmail Server
AMAX Winmail Server Code Execution Vulnerability
AMAX Winmail Server is a set of mail server software from AMAX Group. The software supports SMTP, POP3, WEBMAIL, anti-virus, SMTP authentication and remote control and other functions. A security vulnerability exists in AMAX Winmail Server version 6.1. A remote attacker can exploit the...
Directory traversal
Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php movefolderfile call to move a .php file from the FTP folder into a web folder...
CVE-2017-9846
Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php movefolderfile call to move a .php file from the FTP folder into a web folder...
CVE-2017-9846
Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php movefolderfile call to move a .php file from the FTP folder into a web folder...
CVE-2017-9846
Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php movefolderfile call to move a .php file from the FTP folder into a web folder...
CVE-2017-9846
CVE-2017-9846 affects Winmail Server 6.1. Affected component: netdisk.php in the web folder. Root cause: directory traversal allows an authenticated user to move a PHP file from the FTP folder into the web folder, enabling remote code execution. Documents show multiple references (NVD entry, CNVD...
Winmail Server 4.2 Cross Site Scripting
Winmail Server 4.2 Reflected XSS Cross-site Scripting Web Application 0-Day Security Bug Exploit Title: Winmail Server badlogin.php &lid parameter Reflected XSS Web Security Vulnerability Product: Winmail Server Vendor: Winmail Server Vulnerable Versions: 4.2 4.1 Tested Version: 4.2 4.1 Advisory...
Magic Winmail Server 4.0 (Build 1112) upload.php Traversal Arbitrary File Upload
No description provided by source. source: http://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowing both arbitrary file downloads and uploads...
Magic Winmail Server 2.3 USER POP3 Command Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7667/info A format string vulnerability has been reported for Magic Winmail Server when processing the USER POP3 command. An attacker may exploit this vulnerability by connecting to the vulnerable mail server and issuing...
Magic Winmail Server 4.0 (Build 1112) download.php Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowing both arbitrary file downloads and uploads...
WinMail Server 4.4 build 1124 (WebMail) Remote Add Super User Exploit
No description provided by source. ?php / WinMail Server 4.4 build 1124 WebMail remote add new Super User exploit by rgod software site: http://www.magicwinmail.net/download.asp vulnerable code in /inc/class.session.php at lines 8-25: ... function Load $result = Array; $sessionfile =...
WinMail Server 4.4 build 1124 (WebMail) Remote Add Super User Exploit
Exploit for unknown platform in category web applications ===================================================================== WinMail Server 4.4 build 1124 WebMail Remote Add Super User Exploit =====================================================================...
WinMail Server 4.4 build 1124 - 'WebMail' Remote Add Super User
tempfolder."sessions/".$this-sid.".sess"; if!fileexists$sessionfile return false; $size = filesize$sessionfile; $fp = fopen$sessionfile, "rb"; if $fp $result = fread$fp, $size; fclose$fp; $result = unserializebase64decode$result; return $result; ... This function should check for session files...
Winmail Mail Server 2.3 Remote Format String Exploit
No description provided by source. / Magic Winmail Server 2.3Build 0402 Remote Format string exploit. Coded by ThreaT. This one take advantage of a format bug in the SMTP protocol not pop3 for execute a malicious command on a vulnerable system usage : mwmxploit Target IP command to execute remote...
Winmail Server Webmail Unspecified Vulnerability
The remote host is running Winmail Server, a commercial mail server for Windows from AMAX Information Technologies. According to its version number, the remote installation of Winmail Server is affected by an unknown issue in its webmail component. It is unclear whether this is the same issue...
CVE-2005-3811
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 build 0824 and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter...