CVE

Id
26440  
CVE No.
CVE-2007-3083  
Status
Candidate  
Description
Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb.  
Phase
Assigned (20070605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
267901 26440 CVE-2007-3083 BUGTRAQ:20070601 Z-Blog 1.7 Authentication Bypass Database Download Vulnerability  View
267902 26440 CVE-2007-3083 URL:http://www.securityfocus.com/archive/1/archive/1/470238/100/0/threaded  View
267903 26440 CVE-2007-3083 OSVDB:39739  View
267904 26440 CVE-2007-3083 URL:http://osvdb.org/39739  View
267905 26440 CVE-2007-3083 VUPEN:ADV-2007-2060  View
267906 26440 CVE-2007-3083 URL:http://www.vupen.com/english/advisories/2007/2060  View
267907 26440 CVE-2007-3083 SREASON:2776  View
267908 26440 CVE-2007-3083 URL:http://securityreason.com/securityalert/2776  View
267909 26440 CVE-2007-3083 XF:zblog-zblog-information-disclosure(34673)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55271 JVNDB-2007-003963 PBSite における PHP リモートファイルインクルージョンの脆弱性 PBSite には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-3085 26440 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003963.html  View