Vulnerabilities

TI-2023-21519 CVE-2023-40747 · GHSA-vgqq-j658-qpcx

Path traversal in A.K.I Software pmman.exe

MEDIUM 41

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01293 Published 2024-03-18 No fix listed CWE-22

TI-2023-21035 CVE-2023-40160 · GHSA-27v4-w7r4-68vg

LOW 20

Directory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I Software's PMailServer/PMailServer2 products.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00992 Published 2024-03-18 No fix listed CWE-22

TI-2023-20830 CVE-2023-39933 · GHSA-qgvx-mvf3-xw8r

LOW 20

Insufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I Software's PMailServer/PMailServer2 products.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00448 Published 2024-03-18 No fix listed CWE-434

TI-2023-20380 CVE-2023-39223 · GHSA-3f88-vcg8-m5ph

LOW 24

Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00343 Published 2024-03-18 No fix listed CWE-79