CVE-2012-4940
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail...
CVE-2012-4940 is a medium vulnerability (CVSS 6.4) in Gecad Axigen Free Mail Server, published October 31, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 85.4%, the 99th percentile. No source names a fixed version.
- Severity
- 6.4 MediumCVSS 2.0, NVD
- Exploit chance
- 85.4%EPSS, 99th percentile
- Exploitation
- None known3 public exploits
- Fixed in
- No fix listedNo source names one
Description
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Axigen Mail Server - 'Filename' Directory Traversal | 2012-10-31 |
| Metasploit | Axigen Arbitrary File Read and Delete | 2012-10-31 |
| Nuclei | Axigen Mail Server Filename Directory Traversal |
What each source reports
NVD Score used
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
- Record
CVE-2012-4940- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE ListNo score
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
- Record
CVE-2012-4940- Updated
- 2026-11-02
EUVDEUVD-2012-4865No score
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
- Record
EUVD-2012-4865- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-32jr-8q2g-wwf3No score
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail...
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.
- Record
GHSA-32jr-8q2g-wwf3- Weakness
- CWE-22
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, Nuclei, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.