CVE-2007-5026

dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

2.53% chance of exploitation in the next 30 days, 84th percentile

Published

2007-09-21

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/10514

References

• CVE Record
• NVD entry

Related

• CVE-2007-5019
• CVE-2007-5027
• CVE-2007-5018
• CVE-2007-5036
• CVE-2007-5017
• CVE-2007-5050