Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files via certain parameters to upload.php or (2) read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete arbitrary directories and files via the IMAP commands (3) CREATE, (4) EXAMINE, (5) SELECT, or (6) DELETE.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Magicwinmail WinmailServer 多个 目录遍历漏洞
Vulnerability Description
Magic Winmail Server是一款多功能的WebMail系统。 Magic Winmail Server 4.0 build 1112版本中存在多个目录遍历漏洞。 远程攻击者可利用此漏洞，通过upload.php的certain参数上传任意文件；或通过download.php的certain参数，读取任意文件；也可通过IMAP中的CREATE、EXAMINE、SELECT及DELETE命令，读取、创建或删除任意文件夹及文件。
CVSS Information
N/A
Vulnerability Type
N/A