Family: CGI abuses --> Category: destructive_attack
Winmail Server <= 4.2 Build 0824 Multiple Vulnerabilities Vulnerability Scan
Vulnerability Scan Summary
Checks for multiple vulnerabilities in Winmail Server <= 4.2 Build 0824
Detailed Explanation for this Vulnerability Test
The remote webmail server is affected by directory traversal and
cross-site scripting vulnerabilities.
The remote host is running Winmail Server, a commercial mail server
for Windows from AMAX Information Technologies.
The web interface that is used by Winmail Server for reading mail and
administering the server fails to sanitize user-supplied input to
various parameters and scripts. Beyond the usual cross-site scripting
attacks, this can also be leveraged by an unauthenticated attacker to
overwrite arbitrary files on the affected system, which could
compromise the system's integrity.
See also :
Unknown at this time.
Medium / CVSS Base Score : 4
Click HERE for more information and discussions on this network vulnerability scan.