CVE-2005-3811

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-25 · updated 2026-06-16

Description

Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.

Affected products

Amax Information Technologies Magic Winmail Server: through 4.2

References

http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html
http://secunia.com/advisories/16665
http://secunia.com/secunia_research/2005-58/advisory/
http://securityreason.com/securityalert/195
http://www.osvdb.org/20925
http://www.securityfocus.com/bid/15493/
https://exchange.xforce.ibmcloud.com/vulnerabilities/23132
http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html
http://secunia.com/advisories/16665
http://secunia.com/secunia_research/2005-58/advisory/
http://securityreason.com/securityalert/195
http://www.osvdb.org/20925

Get alerted when CVE-2005-3811 or the next vulnerability affects your stack