magicwinmail kayıtları
magicwinmail üreticisine ait 3 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
3 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2018-5700İstismar yok | Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copy_foldermagicwinmail · winmail server · CWE-22 | Yüksek8,8 | — | %3,3 | 14 Oca 2018 |
36İzleyin | CVE-2017-9846İstismar yok | Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php move_folder_file camagicwinmail · winmail server · CWE-22 | Yüksek8,8 | — | %2,8 | 24 Haz 2017 |
24İzleyin | CVE-2024-55492İstismar yok | Winmail Server 4.4 is vulnerable to f_user=%22%3E%3Csvg%20onload Cross Site Scripting (XSS).magicwinmail · winmail server · CWE-79 | Orta6,1 | — | %0,3 | 18 Ara 2024 |
- CVE-2018-570036İzleyin
Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copy_folder
YüksekCVSS 8,8İstismar yokEPSS %3magicwinmail · winmail server14 Oca 2018
- CVE-2017-984636İzleyin
Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php move_folder_file ca
YüksekCVSS 8,8İstismar yokEPSS %3magicwinmail · winmail server24 Haz 2017
- CVE-2024-5549224İzleyin
Winmail Server 4.4 is vulnerable to f_user=%22%3E%3Csvg%20onload Cross Site Scripting (XSS).
OrtaCVSS 6,1İstismar yokEPSS %0magicwinmail · winmail server18 Ara 2024