CVE-2008-3060 | BDVDB-2026-32714 Detail

Description#

V-webmail 1.5.0 allows remote attackers to obtain sensitive information via (1) malformed input in the login page (includes/local.hooks.php) and (2) an invalid session ID, which reveals the installation path in an error message.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/ref/48/48-v-webmail.txt
http://www.osvdb.org/48794
http://www.osvdb.org/48793
https://exchange.xforce.ibmcloud.com/vulnerabilities/45853

Exploit#

No public exploit known

History#

Version 12008-10-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.