Haxpunk1337

The issue allows authentication bypass by triggering a login failure and then entering a specific substring for directory traversal. This can be achieved by entering `Uid=/../../../../../../../../../../../windows/win.ini%00.jpg&Pwd= any password &ConnMode=1&3054=Login`. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

The issue is related to a Stored cross-site scripting (XSS) vulnerability. This vulnerability is located in the `Signup` parameter.

The issue is related to a Reflected cross-site scripting (XSS) vulnerability in the `test` parameter. This allows for potential malicious script injection and execution.

An Authenticated Reflected Cross-site scripting issue was discovered at the CC Parameter. This issue affects MDaemon and can be exploited when a user is authenticated.

An Authenticated Reflected Cross-site scripting issue was discovered at the `BCC` parameter.