CVE-2008-3060

MEDIUM · CVSS 5 EPSS 1.22%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-10-08 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2008-3060

Severity

MEDIUM

CVSS

EPSS

1.22%

Original NVD Description

V-webmail 1.5.0 allows remote attackers to obtain sensitive information via (1) malformed input in the login page (includes/local.hooks.php) and (2) an invalid session ID, which reveals the installation path in an error message.