CVE-2018-5700

Name of the Vulnerable Software and Affected Versions: Winmail Server versions prior to 6.3

Description: The issue allows remote code execution by authenticated users. This is achieved by leveraging directory traversal in a "netdisk.php" copy folder file call, specifically in the "inc/class.ftpfolder.php" file, to move a .php file from the FTP folder into a web folder.

Recommendations: For Winmail Server versions prior to 6.3, update to version 6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the netdisk.php file and the copy folder file function in inc/class.ftpfolder.php to prevent exploitation.