Description (CNA)
Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| A.K.I Software / pmman.exe (Standard edition) | affected 2.5.1.12154 and earlier |
| A.K.I Software / pmman.exe (Pro edition) | affected 2.5.1.12155 and earlier |
| A.K.I Software / pmman.exe (Standard + IMAP4 edition) | affected 2.5.1.12156 and earlier |
| A.K.I Software / pmman.exe (Pro + IMAP4 edition) | affected 2.5.1.12157 and earlier |
| A.K.I Software / pmman.exe (Enterprise edition) | affected 2.5.1.12158 and earlier |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.