CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-2547

NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.16

EPSS Ranking 94.5%

CVSS Severity

CVSS v2 Score 2.6

References

Products affected by CVE-2004-2547

Netwin » Surgemail » Version: 1.0c

cpe:2.3:a:netwin:surgemail:1.0c
Netwin » Surgemail » Version: 1.0d

cpe:2.3:a:netwin:surgemail:1.0d
Netwin » Surgemail » Version: 1.1a

cpe:2.3:a:netwin:surgemail:1.1a
Netwin » Surgemail » Version: 1.1b

cpe:2.3:a:netwin:surgemail:1.1b
Netwin » Surgemail » Version: 1.1c

cpe:2.3:a:netwin:surgemail:1.1c
Netwin » Surgemail » Version: 1.1d

cpe:2.3:a:netwin:surgemail:1.1d
Netwin » Surgemail » Version: 1.2a

cpe:2.3:a:netwin:surgemail:1.2a
Netwin » Surgemail » Version: 1.2b

cpe:2.3:a:netwin:surgemail:1.2b
Netwin » Surgemail » Version: 1.2c

cpe:2.3:a:netwin:surgemail:1.2c
Netwin » Surgemail » Version: 1.3a

cpe:2.3:a:netwin:surgemail:1.3a
Netwin » Surgemail » Version: 1.3a_rc1

cpe:2.3:a:netwin:surgemail:1.3a_rc1
Netwin » Surgemail » Version: 1.3b

cpe:2.3:a:netwin:surgemail:1.3b
Netwin » Surgemail » Version: 1.3c

cpe:2.3:a:netwin:surgemail:1.3c
Netwin » Surgemail » Version: 1.3d

cpe:2.3:a:netwin:surgemail:1.3d
Netwin » Surgemail » Version: 1.3e

cpe:2.3:a:netwin:surgemail:1.3e
Netwin » Surgemail » Version: 1.3f

cpe:2.3:a:netwin:surgemail:1.3f
Netwin » Surgemail » Version: 1.3g

cpe:2.3:a:netwin:surgemail:1.3g
Netwin » Surgemail » Version: 1.3h

cpe:2.3:a:netwin:surgemail:1.3h
Netwin » Surgemail » Version: 1.3i

cpe:2.3:a:netwin:surgemail:1.3i
Netwin » Surgemail » Version: 1.3j

cpe:2.3:a:netwin:surgemail:1.3j
Netwin » Surgemail » Version: 1.3k

cpe:2.3:a:netwin:surgemail:1.3k
Netwin » Surgemail » Version: 1.3l

cpe:2.3:a:netwin:surgemail:1.3l
Netwin » Surgemail » Version: 1.4a

cpe:2.3:a:netwin:surgemail:1.4a
Netwin » Surgemail » Version: 1.4b

cpe:2.3:a:netwin:surgemail:1.4b
Netwin » Surgemail » Version: 1.4c

cpe:2.3:a:netwin:surgemail:1.4c
Netwin » Surgemail » Version: 1.5a

cpe:2.3:a:netwin:surgemail:1.5a
Netwin » Surgemail » Version: 1.5b

cpe:2.3:a:netwin:surgemail:1.5b
Netwin » Surgemail » Version: 1.5c

cpe:2.3:a:netwin:surgemail:1.5c
Netwin » Surgemail » Version: 1.5d

cpe:2.3:a:netwin:surgemail:1.5d
Netwin » Surgemail » Version: 1.5d2

cpe:2.3:a:netwin:surgemail:1.5d2
Netwin » Surgemail » Version: 1.5f

cpe:2.3:a:netwin:surgemail:1.5f
Netwin » Surgemail » Version: 1.6a

cpe:2.3:a:netwin:surgemail:1.6a
Netwin » Surgemail » Version: 1.6b

cpe:2.3:a:netwin:surgemail:1.6b
Netwin » Surgemail » Version: 1.6d

cpe:2.3:a:netwin:surgemail:1.6d
Netwin » Surgemail » Version: 1.6e

cpe:2.3:a:netwin:surgemail:1.6e
Netwin » Surgemail » Version: 1.6e2

cpe:2.3:a:netwin:surgemail:1.6e2
Netwin » Surgemail » Version: 1.7a

cpe:2.3:a:netwin:surgemail:1.7a
Netwin » Surgemail » Version: 1.7b3

cpe:2.3:a:netwin:surgemail:1.7b3
Netwin » Surgemail » Version: 1.8a

cpe:2.3:a:netwin:surgemail:1.8a
Netwin » Surgemail » Version: 1.8b3

cpe:2.3:a:netwin:surgemail:1.8b3
Netwin » Surgemail » Version: 1.8d

cpe:2.3:a:netwin:surgemail:1.8d
Netwin » Surgemail » Version: 1.8e

cpe:2.3:a:netwin:surgemail:1.8e
Netwin » Surgemail » Version: 1.8g3

cpe:2.3:a:netwin:surgemail:1.8g3
Netwin » Surgemail » Version: 1.9b2

cpe:2.3:a:netwin:surgemail:1.9b2
Netwin » Surgemail » Version: 2.0a2

cpe:2.3:a:netwin:surgemail:2.0a2
Netwin » Webmail » Version: 3.1d

cpe:2.3:a:netwin:webmail:3.1d

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-2547

Products

Pricing

Contact Us