Vulnerabilities

TI-2008-00192 CVE-2008-0210 · GHSA-493f-4jww-99vv

Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from…

LOW 33

Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sess[auth]=1 parameter settting.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02128 Published 2008-01-10 No fix listed CWE-287

TI-2008-00129 CVE-2008-0140 · GHSA-jpw9-mhjf-p23h

Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2…

LOW 33

Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to read arbitrary files via a ..

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02297 Published 2008-01-08 No fix listed CWE-22

Vulnerabilities

Filters

Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from…

Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2…