Magicwinmail

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Magicwinmail records in CISA KEV

No Magicwinmail vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Winmail Server 3 records MEDIUM

Records

3 records in Winmail Server · all components

TI-2018-04110 CVE-2018-5700 · GHSA-3hh3-xxq8-cffj

Winmail Server through 6.2 allows remote code execution by authenticated users who…

MEDIUM 44

Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copy_folder_file call (in inc/class.ftpfolder.php) to move a .php file from the FTP folder…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0333 Published 2018-01-14 No fix listed CWE-22

TI-2017-07218 CVE-2017-9846 · GHSA-h6gg-6vf7-hrjf

Winmail Server 6.1 allows remote code execution by authenticated users who leverage…

MEDIUM 43

Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php move_folder_file call to move a .php file from the FTP folder into a web folder.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0275 Published 2017-06-24 No fix listed CWE-22

TI-2024-36847 CVE-2024-55492 · GHSA-8q3p-665g-pf6p

Winmail Server 4.4 is vulnerable to f_user=%22%3E%3Csvg%20onload Cross Site Scripting (XSS).

LOW 27

Winmail Server 4.4 is vulnerable to f_user=%22%3E%3Csvg%20onload Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00286 Published 2024-12-18 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0