2 matches found
Directory traversal
Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copyfolderfile call in inc/class.ftpfolder.php to move a .php file from the FTP folder into a web folder...
6.5CVSS8.8AI score0.0333EPSS
SaveExploits1References1Affected Software1
CVE-2018-5700: Improper Limitation of a Pathname to a Restricted Directory
Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copyfolderfile call in inc/class.ftpfolder.php to move a .php file from the FTP folder into a web folder...
8.8CVSS8.3AI score0.0333EPSS
SaveExploits1References2
20