CVE-2007-5129: Infoleak
SimpGB 1.46.02 stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) obtain sensitive configuration information via a direct request for admin/cfginfo.php; and (2) download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5129?
CVE-2007-5129 is considered a high severity vulnerability due to its potential for unauthorized access to sensitive information.
How do I fix CVE-2007-5129?
To fix CVE-2007-5129, ensure that access controls are properly configured to restrict access to sensitive files outside the web root.
What types of sensitive information are exposed in CVE-2007-5129?
CVE-2007-5129 exposes sensitive configuration information and allows downloading of arbitrary .inc files.
Who is affected by CVE-2007-5129?
CVE-2007-5129 affects users of SimpGB version 1.46.02.
Can CVE-2007-5129 lead to a data breach?
Yes, CVE-2007-5129 can lead to a data breach by allowing attackers to access sensitive configuration data.