VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 8, 2008· Updated Jun 16, 2026

CVE-2008-3060

CVE-2008-3060

Description

V-webmail 1.5.0 allows remote attackers to obtain sensitive information via (1) malformed input in the login page (includes/local.hooks.php) and (2) an invalid session ID, which reveals the installation path in an error message.

Affected products

2
  • V Webmail/V Webmail2 versions
    cpe:2.3:a:v-webmail:v-webmail:1.5.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:v-webmail:v-webmail:1.5.0:*:*:*:*:*:*:*
    • (no CPE)range: 1.5.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.