CVE-2018-18703
Summary
| CVE | CVE-2018-18703 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-10-29 12:29:00 UTC |
| Updated | 2018-12-04 19:02:00 UTC |
| Description | PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read vulnerabilities in different sections that allow an attacker to read sensitive files on the system via directory traversal, bypassing the login page, as demonstrated by the Mailserver_filesystem/home.php coninb, consent, contrsh, condrft, or conspam parameter. |
Risk And Classification
Problem Types: CWE-22
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Phptpoint | Mailing Server Using File Handling | 1.0 | All | All | All |
| Application | Phptpoint | Mailing Server Using File Handling | 1.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| PHPTPoint Mailing Server Using File Handling 1.0 Arbitrary File Read ≈ Packet Storm | MISC | packetstormsecurity.com | Exploit, Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.