CVE-2005-3811
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824)...
CVE-2005-3811 is a medium vulnerability (CVSS 5.0) in Amax Information Technologies Magic Winmail Server, published November 25, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.33%, the 94th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 7.33%EPSS, 94th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | WinMail Server 4.4 build 1124 - 'WebMail' Remote Add Super User | 2007-04-01 |
What each source reports
NVD Score used
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
- Record
CVE-2005-3811- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
- Record
CVE-2005-3811- Updated
- 2026-11-02
EUVDEUVD-2005-3806No score
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
- Record
EUVD-2005-3806- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8g6v-v3p8-6wx3No score
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824)...
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
- Record
GHSA-8g6v-v3p8-6wx3- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/16665
securityfocus.com/bid/15493
exchange.xforce.ibmcloud.com/vulnerabilities/23132
osvdb.org/20925
archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html
securityreason.com/securityalert/195
nvd.nist.gov/vuln/detail/CVE-2005-3811
github.com/advisories/GHSA-8g6v-v3p8-6wx3