CVE-2008-0210

no score yetEPSS 2.1%

uebimiau webmail: no CVSS score yet. EPSS 2.1% chance of exploitation in the next 30 days.

Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sess[auth]=1 parameter settting. NOTE: this can be leveraged to conduct directory traversal attacks without authentication by using CVE-2008-0140.

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2008-01-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

uebimiau:webmail

References

http://www.securityfocus.com/bid/27154
https://www.exploit-db.com/exploits/4846
http://www.securityfocus.com/bid/27154
https://www.exploit-db.com/exploits/4846

Check your stack JSON