Unrated severityNVD Advisory· Published Aug 20, 2008· Updated Apr 23, 2026
CVE-2008-3728
CVE-2008-3728
Description
Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to determine the installation path, IP addresses, and error messages via direct requests to files under LOG/.
Affected products
1- cpe:2.3:a:microworld_technologies:mailscan:5.6.a:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- marc.infonvdExploit
- www.oliverkarow.de/research/mailscan.txtnvdExploit
- www.securityfocus.com/bid/30700nvdExploit
- secunia.com/advisories/31534nvdVendor Advisory
- securityreason.com/securityalert/4172nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/44518nvd
News mentions
0No linked articles in our index yet.