CVE-2023-39933 - CVE House
Back to Database
Status published Unknown CVE-2023-39933

Insufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included...

Vulnerability Description

Insufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web server's execution privilege.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-39933

Credits & Attribution

No credits recorded in the NVD database.

References

More from A.K.I Software

View All →
CVE-2023-40160
Directory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe)...
Unknown 0

Affected Vendor

A.K.I Software

View all reports →

Affected Software

pmc.exe
Vulnerable Versions:
2.5.1.720 and earlier

Timeline

Official Publish: March 18th, 2024
Last Modified: November 7th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.