Описание
dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local files via a null byte (%00) in the lang parameter, possibly due to a directory traversal vulnerability.
Ссылки
- ExploitPatchVendor Advisory
- ExploitVendor Advisory
- Exploit
- ExploitPatchVendor Advisory
- ExploitVendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:deerfield:visnetic_mail_server:8.3.0_build1:*:*:*:*:*:*:*
cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*
cpe:2.3:a:merak:mail_server:8.3.0r:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.05936
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local files via a null byte (%00) in the lang parameter, possibly due to a directory traversal vulnerability.
EPSS
Процентиль: 90%
0.05936
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other