Description
Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topmenu.html.
References
- 20040910 Multiple vulnerabilities in Icewarp Web Mail 5.2.7 mailing-list
- 12789 third-party-advisory
- merak-icewarp-path-disclosure(17315) vdb-entry
- 11371 vdb-entry