Vulnerability Details CVE-2007-6660
2z project 0.9.6.1 allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid template or (2) a request to the default URI with certain year and month parameters, which reveals the path in various error messages.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.5%
CVSS Severity
CVSS v2 Score 5.0
References
- http://2z-project.ru/forum/viewtopic.php?pid=8309
- http://securityreason.com/securityalert/3514
- http://www.securityfocus.com/archive/1/485590/100/0/threaded
- http://www.securityfocus.com/bid/27057
- http://2z-project.ru/forum/viewtopic.php?pid=8309
- http://securityreason.com/securityalert/3514
- http://www.securityfocus.com/archive/1/485590/100/0/threaded
- http://www.securityfocus.com/bid/27057
Products affected by CVE-2007-6660
-
cpe:2.3:a:2z_project:2z_project:0.9.6.1