PT-2017-19214
CVE-2017-9846
·
تاريخ النشر
2017-06-24
·
تاريخ التحديث
2020-06-11
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Winmail Server version 6.1
Description
The issue allows remote code execution by authenticated users. This is achieved through directory traversal in a
netdisk.php move folder file call, enabling the movement of a .php file from the FTP folder into a web folder.Recommendations
For Winmail Server version 6.1, update to a version that fixes this issue, as the current version allows for remote code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾