CVE-2006-0818

Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows remote authenticated users to include arbitrary files via a modified language parameter and a full Windows or UNC pathname in the lang_settings parameter to mail/index.html, which is not properly sanitized by the validatefolder PHP function, possibly due to an incomplete fix for CVE-2005-4558.

• http://secunia.com/advisories/18953Exploit, Patch, Vendor Advisory
• http://secunia.com/advisories/18966Exploit, Patch, Vendor Advisory
• http://secunia.com/secunia_research/2006-12/advisory/Exploit, Patch, Vendor Advisory
• http://secunia.com/secunia_research/2006-14/advisory/Exploit, Patch, Vendor Advisory
• http://securitytracker.com/id?1016513
• http://securitytracker.com/id?1016514
• http://www.securityfocus.com/archive/1/440297/100/0/threaded
• http://www.securityfocus.com/archive/1/440302/100/0/threaded
• http://www.securityfocus.com/bid/19002Exploit, Patch
• http://www.securityfocus.com/bid/19007
• http://www.vupen.com/english/advisories/2006/2825
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27780
• http://secunia.com/advisories/18953Exploit, Patch, Vendor Advisory
• http://secunia.com/advisories/18966Exploit, Patch, Vendor Advisory
• http://secunia.com/secunia_research/2006-12/advisory/Exploit, Patch, Vendor Advisory
• http://secunia.com/secunia_research/2006-14/advisory/Exploit, Patch, Vendor Advisory
• http://securitytracker.com/id?1016513
• http://securitytracker.com/id?1016514
• http://www.securityfocus.com/archive/1/440297/100/0/threaded
• http://www.securityfocus.com/archive/1/440302/100/0/threaded
• http://www.securityfocus.com/bid/19002Exploit, Patch
• http://www.securityfocus.com/bid/19007
• http://www.vupen.com/english/advisories/2006/2825
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27780

Published

Jul 21, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0812The VisNetic AntiVirus Plug-in (DKAVUpSch.exe) for Mail Serv…
• CVE-2006-0813Heap-based buffer overflow in WinACE 2.60 allows user-assist…
• CVE-2006-0814response.c in Lighttpd 1.4.10 and possibly previous versions…
• CVE-2006-0815NetworkActiv Web Server 3.5.15 allows remote attackers to re…
• CVE-2006-0816Orion Application Server before 2.0.7, when running on Windo…
• CVE-2006-0817Absolute path directory traversal vulnerability in (a) MERAK…
• CVE-2006-0819Dwarf HTTP Server 1.3.2 allows remote attackers to obtain th…
• CVE-2006-0820Cross-site scripting (XSS) vulnerability in Dwarf HTTP Serve…
• CVE-2006-0821SQL injection vulnerability in index.php in BXCP 0.299 allow…
• CVE-2006-0822Unspecified vulnerability in EmuLinker Kaillera Server befor…
• CVE-2006-0823Multiple SQL injection vulnerabilities in Geeklog 1.4.0 befo…
• CVE-2006-0824Multiple unspecified vulnerabilities in lib-common.php in Ge…