CVE-2023-40747

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot...

CVE-2023-40747

A directory traversal vulnerability exists in the CGIs included in the Internal Simple Webserver of A.K.I Software's PMailServer and PMailServer2 products. This flaw allows a remote attacker to access arbitrary files outside the DocumentRoot . For PMailServer2 prior to Version 2.51a, users should...

CVE-2023-40747

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot...

CVE-2023-40160

A directory traversal vulnerability (CWE-22) exists in the Mailing List Search CGI (pmmls.exe) component of A.K.I Software's PMailServer and PMailServer2 products. A remote attacker can exploit this flaw to obtain arbitrary files on the server. For PMailServer2 , users should apply the update fil...

CVE-2023-39933

Insufficient verification vulnerability exists in Broadcast Mail CGI pmc.exe included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web server's execution...

CVE-2023-39933

A security vulnerability exists in the Broadcast Mail CGI (pmc.exe) component of A.K.I Software's PMailServer and PMailServer2 products. The root cause is insufficient verification (CWE-434), which could allow a user capable of uploading files to execute an arbitrary executable file with the web ...

CVE-2023-39933

Insufficient verification vulnerability exists in Broadcast Mail CGI pmc.exe included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web server's execution...

CVE-2023-39223

A stored cross-site scripting (XSS) vulnerability (CWE-79) exists in the CGIs of A.K.I Software's PMailServer and PMailServer2 products. If exploited, an attacker can execute arbitrary scripts on a logged-in user's web browser. Affected components include pmam.exe (specifically in PMailServer Fre...

CVE-2023-39223

Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2023-40747: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot...

CVE-2023-39933: Unrestricted Upload of File with Dangerous Type

Insufficient verification vulnerability exists in Broadcast Mail CGI pmc.exe included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web server's execution...

CVE-2023-39223: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

PT-2024-12780

Name of the Vulnerable Software and Affected Versions A.K.I Software's PMailServer/PMailServer2 products affected versions not specified Description A stored cross-site scripting issue exists in the CGIs included in the products. This could allow an arbitrary script to be executed on a logged-in...

PT-2024-12912

Name of the Vulnerable Software and Affected Versions A.K.I Software's PMailServer/PMailServer2 products affected versions not specified Description A directory traversal vulnerability exists in the CGIs included in the Internal Simple Webserver of A.K.I Software's PMailServer/PMailServer2...

Multiple vulnerabilities in CGIs of PMailServer and PMailServer2

Overview CGIs included with PMailServer and PMailServer2 provided by A.K.I Software contain multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2023-39223 Insufficient verification vulnerability in Broadcast Mail CGI pmc.exe CWE-434 - CVE-2023-39933...

JVN#92720882: Multiple vulnerabilities in CGIs of PMailServer and PMailServer2

CGIs included with PMailServer and PMailServer2 provided by A.K.I Software contain multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2023-39223 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVS...