| Package | Affected versions | Patched versions |
|---|---|---|
| kmail | ≤ 2.3 |
calendar.php in Kamgaing Email System (kmail) 2.3 and earlier allows remote attackers to obtain the full path of the server via an invalid d parameter, which leaks the path in an error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free