Unrated severityNVD Advisory· Published Feb 24, 2007· Updated Jun 16, 2026

CVE-2006-7062

Description

calendar.php in Kamgaing Email System (kmail) 2.3 and earlier allows remote attackers to obtain the full path of the server via an invalid d parameter, which leaks the path in an error message.

Affected products

Kmail/Kmail
cpe:2.3:a:kmail:kmail:*:*:*:*:*:*:*:*
Range: <=2.3
Kamgaing Email System/kmailllm-create
Range: <=2.3

Patches

Vulnerability mechanics

References

pridels0.blogspot.com/2006/04/kmail-23-vuln.htmlnvd
www.osvdb.org/25065nvd
exchange.xforce.ibmcloud.com/vulnerabilities/26120nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000