Exploitation Summary
CVE-2012-4940 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including Zhao Liang, Zhao Liang, juan vazquez, including a Metasploit module auxiliary/admin/http/axigen_file_access.
A Nuclei detection template is also available.
AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in Axigen Mail Server by using '../' sequences to access sensitive files like 'win.ini'. The PoC provides example URLs to exploit the flaw.
Description
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
Exploits (2)
The exploit demonstrates a directory traversal vulnerability in Axigen Mail Server by using '../' sequences to access sensitive files like 'win.ini'. The PoC provides example URLs to exploit the flaw.
This Metasploit module exploits a directory traversal vulnerability in Axigen WebAdmin to read or delete arbitrary files with SYSTEM privileges on Windows. It requires authentication and has been tested on Axigen 8.10.