NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php.
- http://securityreason.com/securityalert/478
No PoCs found on GitHub currently.