CVE-2018-5700

HIGH

Winmail Server <= 6.2 - Authenticated Remote Code Execution via Directory Traversal in netdisk.php

Title source: llm

Description

Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copy_folder_file call (in inc/class.ftpfolder.php) to move a .php file from the FTP folder into a web folder.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://github.com/0xWfox/Winmail/blob/master/Winmail_6.2.md

Scores

CVSS v3 8.8

EPSS 0.0333

EPSS Percentile 87.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-22

Status published

Products (1)

magicwinmail/winmail_server < 6.2

Published Jan 14, 2018

Tracked Since Feb 18, 2026