CVE-2012-4940
Last modified
CVE-2012-4940 is a vulnerability of currently unknown severity. Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.. EPSS estimates a 83.63% chance of exploitation in the next 30 days.
Description
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gecad | Axigen Free Mail Server | All versions |
References
- http://www.kb.cert.org/vuls/id/586556US Government Resource
- http://www.kb.cert.org/vuls/id/586556US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-4940?
How severe is CVE-2012-4940?
How do I fix CVE-2012-4940?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-4934TomatoCart 1.1.7, when the PayPal Express Checkout module is…
- CVE-2012-4935Cross-site request forgery (CSRF) vulnerability in the web i…
- CVE-2012-4936The web interface in Pattern Insight 2.3 allows remote attac…
- CVE-2012-4937Session fixation vulnerability in the web interface in Patte…
- CVE-2012-4938Cross-site scripting (XSS) vulnerability in the web interfac…
- CVE-2012-4939Cross-site scripting (XSS) vulnerability in IPAMSummaryView.…
- CVE-2012-4941Multiple SQL injection vulnerabilities in Agile FleetCommand…
- CVE-2012-4942Multiple cross-site scripting (XSS) vulnerabilities in Agile…
- CVE-2012-4943Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2012-4944Multiple unrestricted file upload vulnerabilities in Agile F…
- CVE-2012-4945Agile FleetCommander and FleetCommander Kiosk before 4.08 al…
- CVE-2012-4946Agile FleetCommander and FleetCommander Kiosk before 4.08 us…
Are you affected by CVE-2012-4940?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST