| Package | Affected versions | Patched versions |
|---|---|---|
| open webmail | = 1.7= 1.71 |
openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free