high7.5Public exploit code
CVE-2000-1100
The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Trlinux Postaci Webmail 1.1.3 - Password Disclosure2000-11-30 · remote · multiple · Verified
Impact
The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trlinux | Postaci Webmail | Version 1.1.3 |