emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.04308
Percentile: 0.88405

CVSS Scoring

Affected Products

• cpe:2.3:a:emumail:emu_webmail:5.0:*:*:*:*:*:*:*

← Back to Home