CVE

Id
24047  
CVE No.
CVE-2007-0690  
Status
Candidate  
Description
myEvent 1.6 allows remote attackers to obtain sensitive information via (1) a Log In action without a password to login.php, or an invalid (2) view[] or (3) monthno[] parameter to myevent.php, which reveals the path in various error messages.  
Phase
Assigned (20070203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
234460 24047 CVE-2007-0690 BUGTRAQ:20070528 myEvent version 1.6 Multiple Path Disclosure Vulnerabilities  View
234461 24047 CVE-2007-0690 URL:http://www.securityfocus.com/archive/1/archive/1/469831/100/0/threaded  View
234462 24047 CVE-2007-0690 MISC:http://www.netvigilance.com/advisory0024  View
234463 24047 CVE-2007-0690 OSVDB:34272  View
234464 24047 CVE-2007-0690 URL:http://www.osvdb.org/34272  View
234465 24047 CVE-2007-0690 OSVDB:38336  View
234466 24047 CVE-2007-0690 URL:http://osvdb.org/38336  View
234467 24047 CVE-2007-0690 SREASON:2744  View
234468 24047 CVE-2007-0690 URL:http://securityreason.com/securityalert/2744  View
234469 24047 CVE-2007-0690 XF:myevent-myevent-login-path-disclosure(34542)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52814 JVNDB-2007-001506 DGNews における重要な情報を取得される脆弱性 DGNews には、重要な情報を取得される脆弱性が存在します。 CVE-2007-0692 24047 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001506.html  View