NVD

Id
53789  
Name
CVE-2007-1605  
Description
w-Agora (Web-Agora) allows remote attackers to obtain sensitive information via a request to rss.php with an invalid (1) site or (2) bn parameter, (3) a certain value of the site[] parameter, or (4) an empty value of the bn[] parameter; a request to index.php with a certain value of the (5) site[] or (6) sort[] parameter; (7) a request to profile.php with an empty value of the site[] parameter; or a request to search.php with (8) an empty value of the bn[] parameter or a certain value of the (9) pattern[] or (10) search_date[] parameter, which reveal the path in various error messages, probably related to variable type inconsistencies. NOTE: the bn[] parameter to index.php is already covered by CVE-2007-0606.1.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-03-22  
Modified Date
2008-11-13  
Seq
2007-1605  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
272638 53789 CVE-2007-1605 2462  View
272639 53789 CVE-2007-1605 20070320 w-agora [multiples file upload,xss,full path disclosure,error sql]  View
272640 53789 CVE-2007-1605 23057  View
272641 53789 CVE-2007-1605 wagora-multiple-path-disclosure(33174)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56597 JVNDB-2007-005289 Web-Agora における重要な情報を取得される脆弱性 w-Agora (Web-Agora) は、諸々のエラーメッセージ内にパスを表示する、および変数の型の不整合に関する処理に不備があるため、重要な情報を取得される脆弱性が存在します。 CVE-2007-1605 24960 CVE-2007-1605 53789 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005289.html 2007-03-22 2012-12-20 View