CVE-2007-0078: Medium severity BattleBlog BattleBlog vulnerability
Published Jan 5, 2007
·Updated
BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/blankmaster.mdb.
Affected Software
1 affected component
BattleBlog BattleBlog=1.0d
Event History
Jan 5, 2007
CVE Published
11:28 AM
Data Sourced
via NVD·11:28 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0078?
CVE-2007-0078 is classified as a medium severity vulnerability.
2
How do I fix CVE-2007-0078?
To fix CVE-2007-0078, restrict access to sensitive files to prevent unauthorized downloading via direct requests.
3
What software versions are affected by CVE-2007-0078?
CVE-2007-0078 affects BattleBlog version 1.0d.
4
What type of vulnerability is CVE-2007-0078?
CVE-2007-0078 is an access control vulnerability that exposes sensitive information.
5
Can CVE-2007-0078 be exploited remotely?
Yes, CVE-2007-0078 can be exploited remotely by attackers who can make direct requests for the vulnerable database file.