CVE-2007-3556 Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an include file containing account credentials via a direc...
MediumCVSS 5.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an include file containing account credentials via a direct request for config.inc.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| doubleflex liesbeth base cms | All versions | No fix listed |
References
- 45744 vdb-entry
- 2857 third-party-advisory
- securityvulns.ru
- 20070703 Moodle XSS / Liesbeth base CMS sensitive information disclosure mailing-list
- 24749 vdb-entry
- liesbethcms-config-information-disclosure(35243) vdb-entry