CVE-2005-0313

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.41%

Published

Jan 27, 2005

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMagic Winmail Server 4.0 (Build 1112) - 'download.php' Traversal Arbitrary File Access Exploit-DBMagic Winmail Server 4.0 (Build 1112) - 'upload.php' Traversal Arbitrary File Upload

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files via certain parameters to upload.php or (2) read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete arbitrary directories and files via the IMAP commands (3) CREATE, (4) EXAMINE, (5) SELECT, or (6) DELETE.

Affected Products (1)

amax_information_technologies · magic_winmail_servervulnerable

References (12)

http://marc.info/?l=bugtraq&m=110685011825461&w=2

http://secunia.com/advisories/14053

http://securitytracker.com/id?1013017

http://www.securityfocus.com/bid/12388

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19108

https://exchange.xforce.ibmcloud.com/vulnerabilities/19114

http://marc.info/?l=bugtraq&m=110685011825461&w=2

http://secunia.com/advisories/14053