Approved changes feed: RSS · Atom

cpe:2.3:a:basilix:basilix_webmail:0.9.7_beta:*:*:*:*:*:*:*

part: a version: 0.9.7_beta update: *

VendorBasilix (4cef7a13-fd7c-5bce-a4a3-9f7c8ac069ee)
ProductBasilix Webmail (f4a5e350-c62a-5d63-88f4-ef0a182d2948)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5167 vulnerable 2026-06-08 04:49:19.840341 Details available
Multiple PHP remote file inclusion vulnerabilities in BasiliX 1.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) BSX_LIBDIR parameter in scripts in /files/ including (a) abook.php3, (b) compose-attach.php3, (c) compose-menu.php3, (d) compose-new.php3, (e) compose-send.php3, (f) folder-create.php3, (g) folder-delete.php3, (h) folder-empty.php3, (i) folder-rename.php3, (j) folders.php3, (k) mbox-action.php3, (l) mbox-list.php3, (m) message-delete.php3, (n) message-forward.php3, (o) message-header.php3, (p) message-print.php3, (q) message-read.php3, (r) message-reply.php3, (s) message-replyall.php3, (t) message-search.php3, or (u) settings.php3; and the (2) BSX_HTXDIR parameter in (v) files/login.php3.
Published: 2006-10-04T00:00:00.000Z
Updated: 2024-08-07T19:41:04.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1044 vulnerable 2026-06-08 04:45:21.330690 Details available
Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.
Published: 2002-02-02T05:00:00.000Z
Updated: 2024-08-08T04:44:06.959Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.