5
CVE-2005-3811
- EPSS 7.33%
- Veröffentlicht 25.11.2005 22:03:00
- Zuletzt bearbeitet 16.06.2026 22:17:40
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginDirectory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Amax Information Technologies ≫ Magic Winmail Server Version <= 4.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.33% | 0.936 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html
http://secunia.com/advisories/16665
http://secunia.com/secunia_research/2005-58/advisory/
http://securityreason.com/securityalert/195
http://www.osvdb.org/20925
http://www.securityfocus.com/bid/15493/
https://exchange.xforce.ibmcloud.com/vulnerabilities/23132