Path Disclosure Vulnerability in SurgeMail and WebMail by NetWin
CVE-2004-2547

Currently unrated

Key Information:

Vendor: Netwin
Status: Surgemail; Webmail
Vendor: CVE Published:; 31 December 2004

Badges

👾 Exploit Exists🟣 EPSS 17%

What is CVE-2004-2547?

The identified path disclosure vulnerability in NetWin's SurgeMail and WebMail allows remote attackers to exploit specific HTTP requests. By accessing URIs such as '/' or '/scripts/' or by attempting to retrieve non-existent files, attackers can trigger error messages that inadvertently reveal sensitive file system paths. This exposure can further aid malicious users in crafting targeted attacks against the affected systems.