CVE-2005-3811

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

7.33%

Published

Nov 25, 2005

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBWinMail Server 4.4 build 1124 - 'WebMail' Remote Add Super User

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.

Affected Products (1)

amax_information_technologies · magic_winmail_servervulnerable

References (14)

http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html

http://secunia.com/advisories/16665

Vendor Advisory

http://secunia.com/secunia_research/2005-58/advisory/

Vendor Advisory

http://securityreason.com/securityalert/195

http://www.osvdb.org/20925

http://www.securityfocus.com/bid/15493/

https://exchange.xforce.ibmcloud.com/vulnerabilities/23132

http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html

http://secunia.com/advisories/16665

Vendor Advisory

http://secunia.com/secunia_research/2005-58/advisory/

Vendor Advisory

http://securityreason.com/securityalert/195

http://www.osvdb.org/20925

http://www.securityfocus.com/bid/15493/

https://exchange.xforce.ibmcloud.com/vulnerabilities/23132

KEV Catalog EPSS Scores Vendors All CVEs