2807 matches found
CVE-2005-4368
roundcube webmail Alpha, with a default high verbose level $rcmailconfig'debuglevel' = 1, allows remote attackers to obtain the full path of the application via an invalidtask parameter, which leaks the path in an error message...
CVE-2005-4368
roundcube webmail Alpha, with a default high verbose level $rcmailconfig'debuglevel' = 1, allows remote attackers to obtain the full path of the application via an invalidtask parameter, which leaks the path in an error message...
CVE-2005-4368
CVE-2005-4368 affects Roundcube Webmail Alpha. When rcube_config['debug_level'] is set to 1 (default high verbose), an attacker can trigger an invalid_task to cause an error message that discloses the full application path. The available connected documents confirm the vulnerability description a...
CVE-2005-4368
roundcube webmail Alpha, with a default high verbose level $rcmailconfig'debuglevel' = 1, allows remote attackers to obtain the full path of the application via an invalidtask parameter, which leaks the path in an error message...
CVE-2005-4368: Exposure of Sensitive Information to an Unauthorized Actor
roundcube webmail Alpha, with a default high verbose level $rcmailconfig'debuglevel' = 1, allows remote attackers to obtain the full path of the application via an invalidtask parameter, which leaks the path in an error message...
Fullpath disclosure in roundcube webmail
I try this request in my mailbox http://xxxx.com/roundcube/?auth=3Dcf559dcf52d8801ccd51cd1f3ba3eca08d1b0bce= &task=3Dma60il then roundcube shows this warning PHP Error in /usr/local/apache2/htdocs/roundcube/index.php 301: Invalid request failed/file not found The requested page was not found!...