Vendor Dictionary: AMAX Information Technologies Inc.

AMAX Information Technologies Inc.

Short Name:	[None Entered]
Previous Names:	[None Entered]
URL:	[None Entered]
Email:	[None Entered]
Security URL:	[None Entered]
Security Email:	[None Entered]
Knowledge Base:	[None Entered]
Notes:	[No Notes]

Vulnerabilities by Vendor Product

AMAX Information Technologies Inc.

AMAX Information Technologies Inc.

Winmail Server: 4.0 (Build 1112); OSVDB ID: 13244 Winmail Server download.php Traversal Arbitrary File Access; OSVDB ID: 13245 Winmail Server upload.php Traversal Arbitrary File Upload; OSVDB ID: 13246 Winmail Server Webmail Web Administration User Information XSS; OSVDB ID: 13247 Winmail Server IMAP Server Multiple Command Traversal; OSVDB ID: 13248 Winmail Server FTP PORT Command Port Scan Bounce Weakness; 5.0 Build 0620; OSVDB ID: 86603 Winmail Server admin/main.php Multiple Parameter XSS; 5.0 Build 0620; OSVDB ID: 86605 Winmail Server Email Subject Field XSS

Magic Winmail Server: 3.6; OSVDB ID: 4118 Winmail Server ldaplib.php Error Message Path Disclosure

Winmail Mail Server: 4.2 (build 0824); OSVDB ID: 20928 Winmail Server Mail Attachment XSS; OSVDB ID: 20926 Winmail Server badlogin.php retid Parameter XSS; OSVDB ID: 20927 Winmail Server Incoming HTML Mail Multiple Field XSS; OSVDB ID: 20925 Winmail Server /admin/main.php sid Parameter Traversal Arbitrary File Overwrite

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.