CVE-2007-3556
published 2007-07-04CVE-2007-3556: Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an include file…
PriorityP334medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
3.02%
85.8th percentile
Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an include file containing account credentials via a direct request for config.inc.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/45744http://securityreason.com/securityalert/2857http://securityvulns.ru/Rdocument392.htmlhttp://www.securityfocus.com/archive/1/472727/100/0/threadedhttp://www.securityfocus.com/bid/24749https://exchange.xforce.ibmcloud.com/vulnerabilities/35243http://osvdb.org/45744http://securityreason.com/securityalert/2857http://securityvulns.ru/Rdocument392.htmlhttp://www.securityfocus.com/archive/1/472727/100/0/threadedhttp://www.securityfocus.com/bid/24749https://exchange.xforce.ibmcloud.com/vulnerabilities/35243
2007-07-04
Published