VULNERABILITY INTELLIGENCE

CVE-2002-1527

CVSS score5 MEDIUM
EPSS probability7.48%
CISA KEVNot currently listed
Published2003-04-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message.

Primary references