NVD

Id
53498  
Name
CVE-2007-1300  
Description
DOURAN Software Technologies ISPUtil 3.32.84.1, and possibly earlier versions, stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user and reseller data via a direct request for scripts/activesessions.ini. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-03-06  
Modified Date
2008-11-13  
Seq
2007-1300  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
270907 53498 CVE-2007-1300 isputil-activesessions-info-disclosure(32800)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52971 JVNDB-2007-001663 DOURAN Software Technologies ISPUtil におけるユーザおよびリセラーデータを取得される脆弱性 DOURAN Software Technologies ISPUtil には、不十分なアクセス管理の Web ルート配下に重要な情報を格納するため、ユーザおよびリセラーデータを取得される脆弱性が存在します。 CVE-2007-1300 24655 CVE-2007-1300 53498 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001663.html 2007-03-06 2012-06-26 View