CVE-2001-1044

published 2001-01-11

CVE-2001-1044: Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows…

Priority P4 30 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

EXPLOIT

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
basilix	basilix_webmail	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.