CVE-2001-1044

2002-02-0205:00:00

mitre

www.cve.org

AI Score

6.2

Confidence

Low

EPSS

0.028

Percentile

90.7%

JSON

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.