Lucene search
HistoryFeb 12, 2007 - 8:28 p.m.
CVE-2007-0880
cve-2007-0880
capital request forms
access control
database credentials
information security
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.9%
Capital Request Forms stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for inc/common_db.inc.
Affected configurations
Node
capital_request_formscapital_request_forms
| CPE | Name | Operator | Version |
|---|---|---|---|
| capital_request_forms:capital_request_forms | capital request forms | eq | * |
Related
cvelist
cvelist
CVE-2007-0880
2007-02-12 20:00:00
nvd
nvd
CVE-2007-0880
2007-02-12 20:28:00
prion
prion
Improper access control
2007-02-12 20:28:00
securityvulns
securityvulns
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.9%
Related for CVE-2007-0880