| Package | Affected versions | Patched versions |
|---|---|---|
| postaci webmail | = 1.1.3 |
The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free