CVE-2000-1100: Trlinux Postaci Webmail

High severity, CVSS 7.5. EPSS: 5.7% chance of exploitation in the next 30 days.

The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.

Affected products

• Trlinux Postaci Webmail: version 1.1.3 only

Published 2001-01-09. Last modified 2026-06-16.