CVE-2015-1503

HIGH NUCLEI

IceWarp Mail Server <11.2 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-1503. PoCs published by Trustwave's SpiderLabs. A Nuclei detection template is also available.

AI-analyzed exploit summary This exploit demonstrates an unauthenticated directory traversal vulnerability in IceWarp Mail Server 11.1.1 and below, allowing attackers to read arbitrary files (e.g., /etc/passwd, /etc/shadow) via crafted HTTP requests to specific endpoints.

Description

Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the file parameter to a webmail/client/skins/default/css/css.php page or .../. (dot dot dot slash dot) in the (2) script or (3) style parameter to webmail/old/calendar/minimizer/index.php.

Exploits (1)

exploitdb WORKING POC
by Trustwave's SpiderLabs · textwebappsphp
https://www.exploit-db.com/exploits/44587

This exploit demonstrates an unauthenticated directory traversal vulnerability in IceWarp Mail Server 11.1.1 and below, allowing attackers to read arbitrary files (e.g., /etc/passwd, /etc/shadow) via crafted HTTP requests to specific endpoints.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: IceWarp Mail Server <= 11.1.1
No auth needed
Prerequisites: Network access to the IceWarp Mail Server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

IceWarp Mail Server <11.1.1 - Directory Traversal
HIGHby 0x_Akoko
Shodan: title:"icewarp" || http.title:"icewarp server administration" || http.title:"icewarp" || cpe:"cpe:2.3:a:icewarp:mail_server"
FOFA: title="icewarp server administration" || title="icewarp"

References (3)

Core 3
Core References
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/147505/IceWarp-Mail-Server-Directory-Traversal.html
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/44587/

Scores

CVSS v3 7.5
EPSS 0.9122
EPSS Percentile 99.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-22
Status published
Products (1)
icewarp/mail_server < 11.2.0
Published May 08, 2018
Tracked Since Feb 18, 2026