Lucene search
HistoryJun 20, 2007 - 9:30 p.m.
CVE-2007-3290
livecms
3.4
categoria.php
sql
error
disclosure
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.4%
categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ’ (quote) character in the cid parameter, which reveals the path in a forced SQL error message.
Affected configurations
Node
livecmslivecmsMatch3.0
ORlivecmslivecmsMatch3.3
ORlivecmslivecmsMatch3.3_rc1
ORlivecmslivecmsMatch3.3_rc2
ORlivecmslivecmsMatch3.4
ORlivecmslivecmsMatch3.4a
Related
prion
prion
Path traversal
2007-06-20 21:30:00
cvelist
cvelist
CVE-2007-3290
2007-06-20 21:00:00
nvd
nvd
CVE-2007-3290
2007-06-20 21:30:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.4%
Related for CVE-2007-3290