VulnCheck KEV: CVE-2012-4940

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in 1 the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in 2 an...

CVE-2012-4940

The Axigen Free Mail Server is vulnerable to multiple directory traversal flaws within the View Log Files component. The root cause is the failure of the index.hsp script to properly sanitize user input, specifically the fileName parameter. Remote attackers can use .. sequences to read or delete ...

CVE-2012-4940

creationtimestamp| type| source ---|---|--- 2012-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37996 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/axigenfileaccess.rb 2025-02-06 03:13:40+00:00| seen|...

Axigen Arbitrary File Read and Delete

This module exploits a directory traversal vulnerability in the WebAdmin interface of Axigen, which allows an authenticated user to read and delete arbitrary files with SYSTEM privileges. The vulnerability is known to work on Windows platforms. This module has been tested successfully on Axigen...