Approved changes feed: RSS · Atom
cpe:2.3:a:icewarp:web_mail:5.6.0:*:*:*:*:*:*:*
part: a version: 5.6.0 update: *
| Vendor | Icewarp (c8030f23-957a-58b4-8b02-23bd6cb49d34) |
|---|---|
| Product | Web Mail (a1dcdb0e-ad47-5962-8186-7d253c8523d1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-0818 |
vulnerable | 2026-06-03 14:27:22.553731 |
Details available
Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows remote authenticated users to include arbitrary files via a modified language parameter and a full Windows or UNC pathname in the lang_settings parameter to mail/index.html, which is not properly sanitized by the validatefolder PHP function, possibly due to an incomplete fix for CVE-2005-4558.
Published: 2006-07-18T22:00:00.000Z
Updated: 2024-08-07T16:48:56.506Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0817 |
vulnerable | 2026-06-03 14:27:22.552004 |
Details available
Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNetic MailServer before 8.5.0.5 allows remote attackers to include arbitrary files via a full Windows path and drive letter in the (1) language parameter in accounts/inc/include.php and (2) lang_settings parameter in admin/inc/include.php, which is not properly sanitized by the securepath function, a related issue to CVE-2005-4556.
Published: 2006-07-18T23:00:00.000Z
Updated: 2024-08-07T16:48:56.454Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.