CVE-2018-18703

PoC —

CVSS 3.0

7.5 high

EPSS

4%p90

Published

Oct 29, 2018 (Oct 29, 2018)

Modified

Jun 17, 2026

Description

PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read vulnerabilities in different sections that allow an attacker to read sensitive files on the system via directory traversal, bypassing the login page, as demonstrated by the Mailserver_filesystem/home.php coninb, consent, contrsh, condrft, or conspam parameter.

Vendors: phptpoint
Products: mailing server using file handling
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.1%)

In the news0 stories

No ingested article mentions this CVE yet.