high7.5Public exploit code
CVE-2019-12593
IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IceWarp 10.4.4 - Local File Inclusion2019-06-04 · webapps · php
Impact
IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Icewarp | Mail Server | through 10.4.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/153161/IceWarp-10.4.4-Local-File-Inclusion.html
- https://github.com/JameelNabbo/exploits/blob/master/IceWarp%20%3C%3D10.4.4%20local%20file%20include.txt
- http://packetstormsecurity.com/files/153161/IceWarp-10.4.4-Local-File-Inclusion.html
- https://github.com/JameelNabbo/exploits/blob/master/IceWarp%20%3C%3D10.4.4%20local%20file%20include.txt