漏洞描述
IceWarp WebClient 存在远程命令执行漏洞，攻击者构造特殊的请求即可远程命令执行
IceWarp WebClient basic 远程命令执行漏洞
PoC代码
暂无相关漏洞推荐
- IceWarp Mail Server ≤11.4.0存在重定向漏洞(CVE-2025-40630)
- POC CVE-2015-1503: IceWarp Mail Server <11.1.1 - Directory Traversal
- POC CVE-2017-7855: IceWarp WebMail 11.3.1.5 - Cross-Site Scripting
- POC CVE-2019-12593: IceWarp Mail Server <=10.4.4 - Local File Inclusion
- POC CVE-2020-27982: IceWarp WebMail 11.4.5.0 - Cross-Site Scripting
- POC CVE-2020-8512: IceWarp WebMail Server <=11.4.4.1 - Cross-Site Scripting
- POC CVE-2021-36580: IceWarp Mail Server - Open Redirect
- POC CVE-2023-37728: IceWarp Webmail Server v10.2.1 - Cross Site Scripting
- POC CVE-2023-39598: IceWarp Email Client - Cross Site Scripting
- POC CVE-2023-39600: IceWarp 11.4.6.0 - Cross-Site Scripting
- POC CVE-2023-39700: IceWarp Mail Server v10.4.5 - Cross-Site Scripting
- POC CVE-2023-40779: IceWarp Mail Server Deep Castle 2 v.13.0.1.2 - Open Redirect
- POC CVE-2024-55218: IceWarp Server 10.2.1 - Cross-Site Scripting