NVD

Id
52830  
Name
CVE-2007-0608  
Description
Advanced Guestbook 2.4.2 allows remote attackers to obtain sensitive information via an invalid (1) GB_TBL parameter to (a) lang/codes-english.php or (b) image.php, which reveal the database name; (2) an invalid GB_DB parameter to index.php, coupled with a ../index lang cookie, which reveals the installation path; or (3) a direct request to index.php with no parameters or cookies, which reveals the installation path.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-05-09  
Modified Date
2012-10-30  
Seq
2007-0608  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266982 52830 CVE-2007-0608 2661  View
266983 52830 CVE-2007-0608 http://www.netvigilance.com/advisory0011  View
266984 52830 CVE-2007-0608 20070507 Advanced Guestbook version 2.4.2 Multiple Error Information Leak Vulnerabilities  View
266985 52830 CVE-2007-0608 ADV-2007-1726  View
266986 52830 CVE-2007-0608 advanced-multiple-script-info-disclosure(34161)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52786 JVNDB-2007-001478 Advanced Guestbook における重要な情報を取得される脆弱性 Advanced Guestbook には、重要な情報を取得される脆弱性が存在します。 CVE-2007-0608 23963 CVE-2007-0608 52830 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001478.html 2007-05-09 2012-06-26 View