Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-40747

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a r

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

A.K.I Software pmman.exe (Standard edition)

  • 2.5.1.12154 and earlieraffected

A.K.I Software pmman.exe (Pro edition)

  • 2.5.1.12155 and earlieraffected

A.K.I Software pmman.exe (Standard + IMAP4 edition)

  • 2.5.1.12156 and earlieraffected

A.K.I Software pmman.exe (Pro + IMAP4 edition)

  • 2.5.1.12157 and earlieraffected

A.K.I Software pmman.exe (Enterprise edition)

  • 2.5.1.12158 and earlieraffected

References