CVE-2001-1044 | BDVDB-2026-3235 Detail

Description#

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12002-02-02Record published in the CVE List.
2. Version 22024-08-08Most recent update recorded in the CVE List.