CVE-2017-9846

Name of the Vulnerable Software and Affected Versions Winmail Server version 6.1

Description The issue allows remote code execution by authenticated users. This is achieved through directory traversal in a netdisk.php move folder file call, enabling the movement of a .php file from the FTP folder into a web folder.

Recommendations For Winmail Server version 6.1, update to a version that fixes this issue, as the current version allows for remote code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.