CVE

Id
24049  
CVE No.
CVE-2007-0692  
Status
Candidate  
Description
DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages.  
Phase
Assigned (20070203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
234470 24049 CVE-2007-0692 BUGTRAQ:20070528 DGNews version 2.1 Path Disclosure Vulnerability  View
234471 24049 CVE-2007-0692 URL:http://www.securityfocus.com/archive/1/archive/1/469826/100/0/threaded  View
234472 24049 CVE-2007-0692 MISC:http://www.netvigilance.com/advisory0021  View
234473 24049 CVE-2007-0692 OSVDB:34226  View
234474 24049 CVE-2007-0692 URL:http://www.osvdb.org/34226  View
234475 24049 CVE-2007-0692 SREASON:2741  View
234476 24049 CVE-2007-0692 URL:http://securityreason.com/securityalert/2741  View
234477 24049 CVE-2007-0692 XF:dgnews-news-path-disclosure(34540)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52816 JVNDB-2007-001508 DGNews の footer.php におけるクロスサイトスクリプティングの脆弱性 DGNews の footer.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-0694 24049 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001508.html  View