IceWarp WebMail calendar_task.html id Variable Path Disclosure

2005-05-01T11:07:37
ID OSVDB:16212
Type osvdb
Reporter OSVDB
Modified 2005-05-01T11:07:37

Description

Manual Testing Notes

http://[victim]:32000/mail/calendar_task.html?id=[sessionid]

References:

Vendor URL: http://www.MerakMailServer.com Secunia Advisory ID:15249 Related OSVDB ID: 16211 Related OSVDB ID: 16207 Related OSVDB ID: 16210 Related OSVDB ID: 16206 Related OSVDB ID: 16208 Related OSVDB ID: 16209 Related OSVDB ID: 16213 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-05/0034.html