VULNERABILITY INTELLIGENCE
CVE-2004-2547
CVSS score2.6 LOW
EPSS probability3.09%
CISA KEVNot currently listed
Published2004-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:N/A:N
Description
NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.
Primary references
- cve@mitre.org — Exploit, Patch
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Exploit, Patch
- cve@mitre.org — Patch
- cve@mitre.org — Exploit, Patch
- cve@mitre.org — Exploit, Patch
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch