CVE-2000-1100

The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to…

published December 19, 2000

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05707 · 93.0th percentile
Published
2000-12-19T05:00Z
EPSS history
Timeline
  • 19 DEC 05:00Z
    The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to…
    cvelistv5