PRODUCT PROFILE

Axigen-Webmail

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2023-403552024/02/07

Axigen WebMail - Cross-Site Scripting

Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5, allows authenticated attackers to execute arbitrary code and obtain sensitive information via the logic for switching between the Standard and Ajax versions.

Axigen-WebmailPoC 已收录

CVSS5.4EPSS 26.7%

中危CVE-2012-49402012/10/31

Axigen Mail Server Filename Directory Traversal

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in an edit or delete action to the default URI.

Axigen-WebmailPoC 已收录

CVSS6.4EPSS 70.6%