CVE-2007-3650: Infoleak
myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached through index.php; (2) a direct request to common.php; and (3) a mode array parameter in the query string to login.php, which reveal the installation path in various error messages.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3650?
CVE-2007-3650 has a medium severity rating due to the potential exposure of sensitive information.
How do I fix CVE-2007-3650?
To fix CVE-2007-3650, update myBloggie to the latest version that addresses this vulnerability.
What information can be leaked due to CVE-2007-3650?
CVE-2007-3650 can lead to the exposure of the installation path and other sensitive information.
What components are affected by CVE-2007-3650?
CVE-2007-3650 affects myWebland myBloggie version 2.1.6 specifically.
Can CVE-2007-3650 be exploited remotely?
Yes, CVE-2007-3650 can be exploited by remote attackers to obtain sensitive information.