Vulnerability Details CVE-2007-3774
Dvbbs 7.1.0 SP1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Data/Dvbbs7.mdb.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.3%
CVSS Severity
CVSS v2 Score 7.8
Products affected by CVE-2007-3774
-
cpe:2.3:a:dvbbs:dvbbs:7.1.0_sp1