cbcvebase.
CVE-2011-3579
published 2011-09-30

CVE-2011-3579: server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to…

PriorityP337medium6.4CVSS 2.0
AVNACLAuNCPINAP
EXPLOIT
EPSS
4.78%
90.8th percentile
server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.

Affected

20 ranges
VendorProductVersion rangeFixed in
icewarpmail_server<= 10.3.2—
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.