NVD

Id
52829  
Name
CVE-2007-0607  
Description
W-Agora (Web-Agora) 4.2.1, when register_globals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-03-20  
Modified Date
2008-09-05  
Seq
2007-0607  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266977 52829 CVE-2007-0607 20070319 w-agora version 4.2.1 Information Disclosure Vulnerability  View
266978 52829 CVE-2007-0607 2465  View
266979 52829 CVE-2007-0607 http://www.netvigilance.com/advisory0015  View
266980 52829 CVE-2007-0607 20070319 w-agora version 4.2.1 Information Disclosure Vulnerability  View
266981 52829 CVE-2007-0607 wagora-globals-information-disclosure(33073)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56346 JVNDB-2007-005038 Web-Agora におけるアプリケーションのパス情報を取得される脆弱性 W-Agora (Web-Agora) は、register_globals が有効になっている際、不十分なアクセスコントロールで Web 文書のルート配下に globals.inc を格納するため、アプリケーションのパス情報を取得される脆弱性が存在します。 CVE-2007-0607 23962 CVE-2007-0607 52829 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005038.html 2007-03-20 2012-12-20 View