CVE-2017-9846

Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php move_folder_file call to move a .php…

published June 24, 2017

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php move_folder_file call to move a .php file from the FTP folder into a web folder.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02750 · 86.0th percentile
Published
2017-06-24T17:00Z
EPSS history
Timeline
  • 24 JUN 17:00Z
    Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php move_folder_file call to move a .php…
    cvelistv5