Lucene search

K
cve[email protected]CVE-2007-5130
HistorySep 27, 2007 - 7:17 p.m.

CVE-2007-5130

2007-09-2719:17:00
CWE-20
web.nvd.nist.gov
23
simpgb
info disclosure
security vulnerability
cve-2007-5130

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.9%

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via (1) an invalid lang parameter to admin/index.php or (2) a direct request to admin/trailer.php, which reveals the path in various error messages.

Affected configurations

NVD
Node
boesch-itsimpgbMatch1.46.02

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.9%

Related for CVE-2007-5130