info
discussion
exploit
solution
references
GFI Mail Essentials BCC Information Disclosure Vulnerability
There is no exploit code required. The sensitive information is automatically disclosed when the BCC'ed message passes through the Mail Essentials filter.
Privacy Statement
Copyright 2010, SecurityFocus