← Back

Magicwinmail

magicwinmail

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Winmail Server
winmail_server
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-55492
1Magicwinmail
1Winmail Server
Jun 17, 2026
Dec 18, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Winmail Server 4.4 is vulnerable to f_user=%22%3E%3Csvg%20onload Cross Site Scripting (XSS).
CVE-2018-5700
1Magicwinmail
1Winmail Server
Jun 17, 2026
Jan 14, 2018
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copy_folder_file call (in inc/class.ftpfolder.php) to move a .php file from the FTP folder...Show more
Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copy_folder_file call (in inc/class.ftpfolder.php) to move a .php file from the FTP folder into a web folder.Show less
CVE-2017-9846
1Magicwinmail
1Winmail Server
May 13, 2026
Jun 24, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php move_folder_file call to move a .php file from the FTP folder into a web folder.