CVE-2007-5130

SimpGB 1.46.02 - Information Disclosure via Invalid Lang Parameter or Direct Trailer.php Request

Title source: llm
STIX 2.1

Description

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via (1) an invalid lang parameter to admin/index.php or (2) a direct request to admin/trailer.php, which reveals the path in various error messages.

References (5)

Core 5
Core References
Various Sources x_refsource_misc
http://www.netvigilance.com/advisory0064
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/36775
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/480593/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3172

Scores

EPSS 0.0110
EPSS Percentile 61.8%

Details

CWE
CWE-20
Status published
Products (1)
boesch-it/simpgb 1.46.02
Published Sep 27, 2007
Tracked Since Feb 18, 2026