Description
Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that contains invalid characters for a Windows foldername, which reveals the path in an error message.
References
- 12399 vdb-entry
- 14075 third-party-advisory
- http://www.lovebug.org/imd_advisory.txt
- 20050129 XSS in Infinite Mobile Delivery v2.6 Webmail mailing-list
- 1013044 vdb-entry
- infinite-mobile-delivery-path-disclosure(19154) vdb-entry