Beveiligingsadvies

CVE-2012-4940

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2012-10-31 19:00:00

Laatst bijgewerkt 2024-08-06 20:50:18

Toegewezen door certcc

CVSS-score geen score

Status PUBLISHED

Beschrijving

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.

← Alle CVE's bekijken Bekijk op cve.org ↗