Magicwinmail Winmail Server
3 CVEs affecting Magicwinmail Winmail Server. Latest disclosed: 2024-12-18. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-5700 | High | 8.8 | 2018-01-14 | Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copy_folder_file call (in inc/… |
CVE-2017-9846 | High | 8.8 | 2017-06-24 | Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php move_folder_file call to move a .php f… |
CVE-2024-55492 | Medium | 6.1 | 2024-12-18 | Winmail Server 4.4 is vulnerable to f_user=%22%3E%3Csvg%20onload Cross Site Scripting (XSS). |