CVE-2007-5130 SimpGB 1.46.02 allows remote attackers to obtain sensitive information via (1) an invalid lang parameter to admin/index.php or (2) a direct request to admin/trailer.php, which reveals the path in vari...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SimpGB 1.46.02 allows remote attackers to obtain sensitive information via (1) an invalid lang parameter to admin/index.php or (2) a direct request to admin/trailer.php, which reveals the path in various error messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| boesch-it simpgb | = 1.46.02 | No fix listed |
References
- forum.boesch-it.de patch
- 3172 third-party-advisory
- www.netvigilance.com
- 20070925 SimpGB version 1.46.02 Multiple Path Disclosure Vulnerabilities mailing-list
- simpgb-lang-path-disclosure(36775) vdb-entry