CVE

Id
23963  
CVE No.
CVE-2007-0606  
Status
Candidate  
Description
w-agora 4.2.1 allows remote attackers to obtain sensitive information by via the (1) bn[] array parameter to index.php, which expects a string, and (2) certain parameters to delete_forum.php, which displays the path name in the resulting error message.  
Phase
Assigned (20070130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
233519 23963 CVE-2007-0606 BUGTRAQ:20070319 w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities  View
233520 23963 CVE-2007-0606 URL:http://www.securityfocus.com/archive/1/archive/1/463213/100/0/threaded  View
233521 23963 CVE-2007-0606 MISC:http://www.netvigilance.com/advisory0014  View
233522 23963 CVE-2007-0606 OSVDB:31668  View
233523 23963 CVE-2007-0606 URL:http://www.osvdb.org/31668  View
233524 23963 CVE-2007-0606 OSVDB:31669  View
233525 23963 CVE-2007-0606 URL:http://www.osvdb.org/31669  View
233526 23963 CVE-2007-0606 SREASON:2461  View
233527 23963 CVE-2007-0606 URL:http://securityreason.com/securityalert/2461  View
233528 23963 CVE-2007-0606 XF:wagora-deleteforumindex-path-disclosure(33076)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52786 JVNDB-2007-001478 Advanced Guestbook における重要な情報を取得される脆弱性 Advanced Guestbook には、重要な情報を取得される脆弱性が存在します。 CVE-2007-0608 23963 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001478.html  View