Vulnerabilities > CVE-2007-3556 - Information Disclosure vulnerability in Liesbeth Base CMS

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
doubleflex
exploit available
NVD
Published: 2007-07-04
Updated: 2018-10-15

Summary

Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an include file containing account credentials via a direct request for config.inc.

Vulnerable Configurations

Part Description Count
Application
Doubleflex
1

Exploit-Db

descriptionLiesbeth Base CMS Information Disclosure Vulnerability. CVE-2007-3556. Webapps exploit for php platform
idEDB-ID:30262
last seen2016-02-03
modified2007-07-02
published2007-07-02
reporterdurito
sourcehttps://www.exploit-db.com/download/30262/
titleLiesbeth Base CMS Information Disclosure Vulnerability

References