CVE-2007-5113

report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web server logs) via certain modified query parameters, as demonstrated using the profile, rid, prefs, n, vid, bd, ed, dt, and gtype parameters, a different vulnerability than CVE-2007-5112.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

2.98% chance of exploitation in the next 30 days, 86th percentile

Published

2007-09-26

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30661

References

• CVE Record
• NVD entry

Related

• CVE-2007-5112
• CVE-2007-5117
• CVE-2007-5111
• CVE-2007-5120
• CVE-2007-5110
• CVE-2007-5122