CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.6. It may be remotely exploitable.
CVE
CVE-2004-2547
Severity
LOW
CVSS
2.6
EPSS
3.09%
Original NVD Description
NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.