CVE-2007-5172

UNKNOWN

Quicksilver Forums before 1

Published Oct 1, 2007

Modified 1 years ago

No fix available

Details

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message.

References

WEBhttp://forums.quicksilverforums.com/index.php?a=topic&t=1332 ADVISORYhttp://secunia.com/advisories/26998 WEBhttp://www.securityfocus.com/bid/25887 WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/36891 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2007-5172

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

NoneI:N

Availability

NoneA:N

5/AV:N/AC:L/Au:N/C:P/I:N/A:N

Ecosystems

Timeline

PublishedOct 1, 2007

ModifiedAug 7, 2024