Basilix Webmail
Vendor:
First CVE: Jan 11, 2001 · Active for 25 years
7
Total CVEs
More Total CVEs than 83% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
5.2
Avg CVSS
Higher Avg CVSS than 9% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Basilix Webmail over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 11, 2001
25 years ago
Most Recent CVE
Oct 5, 2006
7,232 days ago
CVE Severity & Scoring
Basilix Webmail7 CVEs
29%
57%
14%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown7 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown7 (100.0%)
User Interaction
None0 (0.0%)
Unknown7 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown7 (100.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2002-1708MEDIUM Cross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as other users by injecting script into the (1) subject or (2) | Dec 31, 2002 | 6.8 | 34 | NO | YES |
CVE-2001-1044HIGH Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to | Jan 11, 2001 | 7.5 | 31 | NO | YES |
CVE-2006-5167MEDIUM Multiple PHP remote file inclusion vulnerabilities in BasiliX 1.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) BSX_LIBDIR parameter in sc | Oct 5, 2006 | 5.1 | 23 | NO | YES |
CVE-2001-1045MEDIUM Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the request_id[DUMM | Jul 6, 2001 | 5.0 | 23 | NO | YES |
CVE-2002-1709MEDIUM SQL injection vulnerability in BasiliX Webmail 1.10 allows remote attackers to obtain sensitive information or possibly modify data via the id variable. | Dec 31, 2002 | 6.4 | 17 | NO | NO |
The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local | Dec 31, 2002 | 3.6 | 13 | NO | NO |
BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments. | Dec 31, 2002 | 2.1 | 11 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
57.1% of CVEs· 93rd percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Basilix Webmail
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.1.0 | 5 | 4.8 | 1.8% | 0 | 2 |
| 1.03_beta | 2 | 5.0 | 3.4% | 0 | 2 |
| 1.02_beta | 2 | 5.0 | 3.4% | 0 | 2 |
| 0.9.7_beta | 2 | 6.3 | 5.0% | 0 | 2 |