| Package | Affected versions | Patched versions |
|---|---|---|
| surgemail | = 1.0c= 1.0d= 1.1a= 1.1b= 1.1c= 1.1d= 1.2a= 1.2b= 1.2c= 1.3a= 1.3a_rc1= 1.3b= 1.3c= 1.3d= 1.3e= 1.3f= 1.3g= 1.3h= 1.3i= 1.3j= 1.3k= 1.3l= 1.4a= 1.4b= 1.4c= 1.5a= 1.5b= 1.5c= 1.5d= 1.5d2= 1.5f= 1.6a= 1.6b= 1.6d= 1.6e= 1.6e2= 1.7a= 1.7b3= 1.8a= 1.8b3= 1.8d= 1.8e= 1.8g3= 1.9b2= 2.0a2 | |
| webmail | = 3.1d |
NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free