CVE-2001-1044

N/A

Descripcion

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado1/11/2001

Ultima modificacion4/16/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

basilix:basilix_webmail

Referencias

http://www.securityfocus.com/archive/1/155897(cve@mitre.org)

http://www.securityfocus.com/bid/2198(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/5934(cve@mitre.org)

http://www.securityfocus.com/archive/1/155897(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/2198(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/5934(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.