VULNERABILITY INTELLIGENCE
CVE-2001-1044
CVSS score7.5 HIGH
EPSS probability6.94%
CISA KEVNot currently listed
Published2001-01-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.
Primary references
- cve@mitre.org — Exploit, Patch, Vendor Advisory
- cve@mitre.org — Exploit, Patch, Vendor Advisory
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108