CVE-2005-3811: Amax Information Technologies Magic Winmail Server

Medium severity, CVSS 5.0. EPSS: 7.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.

Affected products

• Amax Information Technologies Magic Winmail Server: up to and including 4.2

Published 2005-11-25. Last modified 2026-06-16.