Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Basilix_webmail | Basilix | 0.9.7_beta (including) | 0.9.7_beta (including) |