Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Basilix Webmail不正确文件许可漏洞
Vulnerability Description
Basilix Webmail 0.9.7beta版本以及可能其他的版本在文档根下储存*.class和*.inc文件并且不限制访问，远程攻击者可以获得来自mysql.class文件的例如MySQL密码和用户名的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A