CVEvulnerability
CVE-2007-4072
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-07-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive information by viewing the HTML source, as demonstrated by viewing the source generated from index.php.
Affected configurations
• tincan webbler cms (<= 3.1.4)
Related
Referenced by CWE · observed example (1)
- CWE-615 Inclusion of Sensitive Information in Source Code Comments weakness
References
- http://osvdb.org/38995 osvdb.org
- http://tincan.co.uk/?lid=1975 Patch
- http://www.procheckup.com/Vulner_2007.php www.procheckup.com
- http://www.securityfocus.com/archive/1/474530/100/0/threaded www.securityfocus.com
- http://osvdb.org/38995 osvdb.org
- http://tincan.co.uk/?lid=1975 Patch
- http://www.procheckup.com/Vulner_2007.php www.procheckup.com
- http://www.securityfocus.com/archive/1/474530/100/0/threaded www.securityfocus.com