CVE-2010-3460

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.

• CWE-22

• http://packetstormsecurity.org/1009-exploits/axigen741-traversal.txtExploit
• http://secunia.com/advisories/41430Vendor Advisory
• http://www.acunetix.com/blog/news/directory-traversal-axigen/
• http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.htmlPatch, Vendor Advisory
• http://www.osvdb.org/68027
• http://www.securityfocus.com/bid/43230Exploit
• http://www.vupen.com/english/advisories/2010/2415Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61826
• http://packetstormsecurity.org/1009-exploits/axigen741-traversal.txtExploit
• http://secunia.com/advisories/41430Vendor Advisory
• http://www.acunetix.com/blog/news/directory-traversal-axigen/
• http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.htmlPatch, Vendor Advisory
• http://www.osvdb.org/68027
• http://www.securityfocus.com/bid/43230Exploit
• http://www.vupen.com/english/advisories/2010/2415Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61826

Published

Sep 17, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3454Multiple off-by-one errors in the WW8DopTypography::ReadFrom…
• CVE-2010-3455Cross-site scripting (XSS) vulnerability in index.php in ACh…
• CVE-2010-3456Directory traversal vulnerability in download.php in EnergyS…
• CVE-2010-3457Multiple cross-site scripting (XSS) vulnerabilities in Symph…
• CVE-2010-3458SQL injection vulnerability in lib/toolkit/events/event.sect…
• CVE-2010-3459Cross-site scripting (XSS) vulnerability in the Ajax WebMail…
• CVE-2010-3461SQL injection vulnerability in the Publisher module in eNdon…
• CVE-2010-3462Cross-site scripting (XSS) vulnerability in backend/plugin/R…
• CVE-2010-3463Cross-site scripting (XSS) vulnerability in modules/search/s…
• CVE-2010-3464Cross-site request forgery (CSRF) vulnerability in admin/man…
• CVE-2010-3465Multiple cross-site scripting (XSS) vulnerabilities in XSE S…
• CVE-2010-3466Cross-site scripting (XSS) vulnerability in index.php in the…