Skip to content
OpenAdvisories
Low · 3.7 CVE-2023-40160 EUVD-2023-44767GHSA-27v4-w7r4-68vg

Directory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I Software's PMailServer/PMailServer2 produ…

Published Mar 18, 2024 · Updated Mar 24, 2025 · Assigned by jpcert

Description

Directory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a remote attacker may obtain arbitrary files on the server.

Affected products

VendorProductAffectedFixed
A.K.I Software pmmls.exe 2.5.1.561 and earlier —

References