U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request to index.php with method=showfullcsv, which reveals the POP3 server configuration, including account name and password.
References
| Link | Resource |
|---|---|
| http://nsag.ru/vuln/890.html | |
| http://secunia.com/advisories/18998 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/24890 |
Configurations
Information
Published : 2006-02-28 03:02
Updated : 2017-07-19 18:30
NVD link : CVE-2006-0937
Mitre link : CVE-2006-0937
JSON object : View
CWE
Products Affected
unu_networks
- mailgust


