CVE-2007-4937
published 2007-09-18CVE-2007-4937: CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5…
PriorityP430medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
2.58%
83.3th percentile
CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/26805http://securityreason.com/securityalert/3147http://www.securityfocus.com/archive/1/479194/100/0/threadedhttp://www.securityfocus.com/bid/25652https://exchange.xforce.ibmcloud.com/vulnerabilities/36587http://secunia.com/advisories/26805http://securityreason.com/securityalert/3147http://www.securityfocus.com/archive/1/479194/100/0/threadedhttp://www.securityfocus.com/bid/25652https://exchange.xforce.ibmcloud.com/vulnerabilities/36587
2007-09-18
Published