EUVD-2018-17469

Malware in sbrugna...

EUVD-2017-18756

Malware in sbrugna...

Directory traversal

Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copyfolderfile call in inc/class.ftpfolder.php to move a .php file from the FTP folder into a web folder...

CVE-2018-5700

Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copyfolderfile call in inc/class.ftpfolder.php to move a .php file from the FTP folder into a web folder...

CVE-2018-5700

Winmail Server (versions up to 6.2) is affected by CVE-2018-5700 through a directory traversal in netdisk.php (copy_folder_file) that allows authenticated users to move a PHP file from the FTP folder into a web folder, enabling remote code execution. OpenVAS notes a vulnerability in Winmail Server

CVE-2018-5700: Improper Limitation of a Pathname to a Restricted Directory

Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copyfolderfile call in inc/class.ftpfolder.php to move a .php file from the FTP folder into a web folder...

PT-2018-17096

Name of the Vulnerable Software and Affected Versions: Winmail Server versions prior to 6.3 Description: The issue allows remote code execution by authenticated users. This is achieved by leveraging directory traversal in a "netdisk.php" copy folder file call, specifically in the...

CVE-2017-9846

Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php movefolderfile call to move a .php file from the FTP folder into a web folder...

Directory traversal

Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php movefolderfile call to move a .php file from the FTP folder into a web folder...

PT-2017-19214

Name of the Vulnerable Software and Affected Versions Winmail Server version 6.1 Description The issue allows remote code execution by authenticated users. This is achieved through directory traversal in a netdisk.php move folder file call, enabling the movement of a .php file from the FTP folder...

CVE-2017-9846: Improper Limitation of a Pathname to a Restricted Directory

Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php movefolderfile call to move a .php file from the FTP folder into a web folder...