CVE-2012-4940
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail...
CVE-2012-4940 is a medium vulnerability (CVSS 6.4) in Gecad Axigen Free Mail Server, published October 31, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 85.4%, the 99th percentile. No source names a fixed version.
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
Exploit likelihood
What each source reports
NVD Score used
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
- Record
CVE-2012-4940- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
- Record
CVE-2012-4940- Updated
- 2026-11-02
EUVDEUVD-2012-4865 No score
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
- Record
EUVD-2012-4865- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-32jr-8q2g-wwf3 No score
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail...
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
- Record
GHSA-32jr-8q2g-wwf3- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Axigen Mail Server - 'Filename' Directory Traversal | 2012-10-31 |
| Metasploit | Axigen Arbitrary File Read and Delete | 2012-10-31 |
| Nuclei | Axigen Mail Server Filename Directory Traversal |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, Metasploit, Nuclei, NVD |