CVE-2001-1044

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

6.94% chance of exploitation in the next 30 days, 94th percentile

Published

2002-02-02

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20538

Security advisories

• http://www.securityfocus.com/archive/1/155897
• http://www.securityfocus.com/bid/2198

References

• CVE Record
• NVD entry