CVE-2007-6512: Infoleak
Published Dec 21, 2007
·Updated
PHP MySQL Banner Exchange 2.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database information via a direct request to inc/lib.inc.
Affected Software
1 affected component
PHP MySQL Banner Exchange=2.2.1
Event History
Dec 21, 2007
CVE Published
10:46 PM
Dec 22, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6512?
CVE-2007-6512 is classified as a medium severity vulnerability due to the potential exposure of sensitive database information.
2
How do I fix CVE-2007-6512?
To fix CVE-2007-6512, ensure that sensitive files are not stored under the web root and restrict access controls appropriately.
3
What type of information is at risk with CVE-2007-6512?
CVE-2007-6512 allows remote attackers to access sensitive database information stored in the inc/lib.inc file.
4
Which software versions are affected by CVE-2007-6512?
CVE-2007-6512 specifically affects PHP MySQL Banner Exchange version 2.2.1.
5
Can CVE-2007-6512 be exploited remotely?
Yes, CVE-2007-6512 can be exploited remotely through direct requests to the vulnerable file.