Security Advisory

CVE-2018-18703

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-10-27 19:00:00

Last updated 2024-08-05 11:16:00

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read vulnerabilities in different sections that allow an attacker to read sensitive files on the system via directory traversal, bypassing the login page, as demonstrated by the Mailserver_filesystem/home.php coninb, consent, contrsh, condrft, or conspam parameter.

← Browse all CVEs View on cve.org ↗