CVEvulnerability
CVE-2001-1044
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-01-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.
Affected configurations
• basilix basilix webmail 0.9.7 beta
References
- http://www.securityfocus.com/archive/1/155897 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/2198 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5934 exchange.xforce.ibmcloud.com
- http://www.securityfocus.com/archive/1/155897 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/2198 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5934 exchange.xforce.ibmcloud.com