Get Demo
NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php.