CVE-2001-1044

N/A

Descricao

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado1/11/2001

Ultima modificacao4/16/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

basilix:basilix_webmail

Referencias

http://www.securityfocus.com/archive/1/155897(cve@mitre.org)

http://www.securityfocus.com/bid/2198(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/5934(cve@mitre.org)

http://www.securityfocus.com/archive/1/155897(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/2198(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/5934(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.