Description
Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php move_folder_file call to move a .php file from the FTP folder into a web folder.
Unscored
CVE-2017-9846
EUVD-2017-18756GHSA-h6gg-6vf7-hrjf
Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php move_folder_file c…
Published Jun 24, 2017 · Updated Aug 5, 2024 · Assigned by mitre