VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 11, 2001· Updated Jun 16, 2026

CVE-2001-1044

CVE-2001-1044

Description

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Basilix/Webmail2 versions
    cpe:2.3:a:basilix:basilix_webmail:0.9.7_beta:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:basilix:basilix_webmail:0.9.7_beta:*:*:*:*:*:*:*
    • (no CPE)range: <=0.9.7beta

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.