Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3460. PoCs published by Bogdan Calin.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Axigen Webmail 7.4.1 by using URL-encoded backslashes to traverse directories and access sensitive files like `win.ini`. The PoC provides a clear example of the attack vector without requiring authentication.
Description
Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Axigen Webmail 7.4.1 by using URL-encoded backslashes to traverse directories and access sensitive files like `win.ini`. The PoC provides a clear example of the attack vector without requiring authentication.