Vulnerability in Trlinux Postaci Webmail
CVE-2000-1100
The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.
EPSS: 0.057 (92.2th percentile) — read the EPSS interpretation.
Affected products
- Trlinux Postaci_webmail — versions 1.1.3
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)