CVE-2007-3083 Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb.
HighCVSS 7.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rainbowsoft z-blog | = 1.7 | No fix listed |
References
- 39739 vdb-entry
- 2776 third-party-advisory
- 20070601 Z-Blog 1.7 Authentication Bypass Database Download Vulnerability mailing-list
- ADV-2007-2060 vdb-entry
- zblog-zblog-information-disclosure(34673) vdb-entry