CVEvulnerability
CVE-2007-5113
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-09-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-287
Description
report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web server logs) via certain modified query parameters, as demonstrated using the profile, rid, prefs, n, vid, bd, ed, dt, and gtype parameters, a different vulnerability than CVE-2007-5112.
Affected configurations
• roi revolution urchin (<= 5.7.03)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://ha.ckers.org/blog/20070823/xss-and-possible-information-disclosure-in-urchin/ ha.ckers.org
- http://securityvulns.ru/Sdocument90.html securityvulns.ru
- http://websecurity.com.ua/1283/ websecurity.com.ua
- http://www.securityfocus.com/archive/1/482006/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26037 www.securityfocus.com
- http://ha.ckers.org/blog/20070823/xss-and-possible-information-disclosure-in-urchin/ ha.ckers.org
- http://securityvulns.ru/Sdocument90.html securityvulns.ru
- http://websecurity.com.ua/1283/ websecurity.com.ua
- http://www.securityfocus.com/archive/1/482006/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26037 www.securityfocus.com