vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2006-0818

N/A
Published: July 18, 2006 at 10:00 PM UTC
Updated: June 16, 2026 at 10:21 PM UTC
3 products affected across 3 vendorsWeb MailMail ServerVisnetic Mail Server

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 2%

Description

Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows remote authenticated users to include arbitrary files via a modified language parameter and a full Windows or UNC pathname in the lang_settings parameter to mail/index.html, which is not properly sanitized by the validatefolder PHP function, possibly due to an incomplete fix for CVE-2005-4558.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

References (12)

Third Party Advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
Source: [email protected]
http://secunia.com/advisories/18953
Third Party Advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
Source: [email protected]
http://secunia.com/advisories/18966
x_refsource_MISCExploitPatchVendor Advisory
Source: [email protected]
http://secunia.com/secunia_research/2006-12/advisory/
x_refsource_MISCExploitPatchVendor Advisory
Source: [email protected]
http://secunia.com/secunia_research/2006-14/advisory/
VDB Entryx_refsource_SECTRACK
Source: [email protected]
http://securitytracker.com/id?1016513
VDB Entryx_refsource_SECTRACK
Source: [email protected]
http://securitytracker.com/id?1016514
Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/440297/100/0/threaded
Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/440302/100/0/threaded

CVSS

4MEDIUM[email protected]
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card