VulnerabilityModified
CVE-2007-4072
Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive information by viewing the HTML source, as demonstrated by viewing the source generated from…
MEDIUM 5.0EPSS 1.22%
Does this matter?
Lower severity and a low EPSS score (1.22%). Track it; it rarely justifies an emergency change on its own.
Description
Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive information by viewing the HTML source, as demonstrated by viewing the source generated from index.php.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.22% probability · 67th percentile
- CISA KEV
- Not listed
- Affected
- tincan/webbler cms
- Source
- cve@mitre.org
References
- http://osvdb.org/38995
- http://tincan.co.uk/?lid=1975Patch
- http://www.procheckup.com/Vulner_2007.php
- http://www.securityfocus.com/archive/1/474530/100/0/threaded
- http://osvdb.org/38995
- http://tincan.co.uk/?lid=1975Patch
- http://www.procheckup.com/Vulner_2007.php
- http://www.securityfocus.com/archive/1/474530/100/0/threaded
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.