Directory traversal

Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copyfolderfile call in inc/class.ftpfolder.php to move a .php file from the FTP folder into a web folder...

PT-2018-17096

Name of the Vulnerable Software and Affected Versions: Winmail Server versions prior to 6.3 Description: The issue allows remote code execution by authenticated users. This is achieved by leveraging directory traversal in a "netdisk.php" copy folder file call, specifically in the...

CVE-2018-5700: Improper Limitation of a Pathname to a Restricted Directory

Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copyfolderfile call in inc/class.ftpfolder.php to move a .php file from the FTP folder into a web folder...