Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-2547. PoCs published by Donnie Werner.
AI-analyzed exploit summary The provided text describes vulnerabilities in SurgeMail/WebMail, specifically path disclosure and cross-site scripting (XSS) due to insufficient input sanitization. It references affected versions and a generic example URL but lacks actual exploit code.
Description
NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.
Exploits (1)
The provided text describes vulnerabilities in SurgeMail/WebMail, specifically path disclosure and cross-site scripting (XSS) due to insufficient input sanitization. It references affected versions and a generic example URL but lacks actual exploit code.