Vulnerability Details CVE-2000-1100
The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.9%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2000-1100
-
cpe:2.3:a:trlinux:postaci_webmail:1.1.3