45744vdb entry
http://osvdb.org/45744 CVE-2007-3556
Liesbeth Base CMS - Information Disclosure
Record summary
CVE-2007-3556 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an include file containing account credentials via a direct request for config.inc.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBLiesbeth Base CMS - Information DisclosureExploitDB exploitby duritoNot analyzed1 file
References
72857Third-party advisory
http://securityreason.com/securityalert/2857 securityvulns.ru
http://securityvulns.ru/Rdocument392.html 20070703 Moodle XSS / Liesbeth base CMS sensitive information disclosuremailing list
http://www.securityfocus.com/archive/1/472727/100/0/threaded 24749vdb entry
http://www.securityfocus.com/bid/24749 liesbethcms-config-information-disclosure(35243)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/35243 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-3556