CVE-2007-3083 - Vulnerability Details - OpenCVE

Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Rainbowsoft	Z-blog

Configuration 1 [-]

cpe:2.3:a:rainbowsoft:z-blog:1.7:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://osvdb.org/39739
http://securityreason.com/securityalert/2776
http://www.securityfocus.com/archive/1/470238/100/0/threaded
http://www.vupen.com/english/advisories/2007/2060
https://exchange.xforce.ibmcloud.com/vulnerabilities/34673

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-06-06T10:00:00

Updated: 2024-08-07T14:05:28.585Z

Reserved: 2007-06-05T00:00:00

Link: CVE-2007-3083

Vulnrichment

No data.

NVD

Status : Modified

Published: 2007-06-06T10:30:00.000

Modified: 2024-11-21T00:32:22.207

Link: CVE-2007-3083

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-06-01T00:00:00", "descriptions": [{"lang": "en", "value": "Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2007-2060", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/2060"}, {"name": "zblog-zblog-information-disclosure(34673)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34673"}, {"name": "20070601 Z-Blog 1.7 Authentication Bypass Database Download Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/470238/100/0/threaded"}, {"name": "2776", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2776"}, {"name": "39739", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/39739"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-3083", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2007-2060", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/2060"}, {"name": "zblog-zblog-information-disclosure(34673)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34673"}, {"name": "20070601 Z-Blog 1.7 Authentication Bypass Database Download Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/470238/100/0/threaded"}, {"name": "2776", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2776"}, {"name": "39739", "refsource": "OSVDB", "url": "http://osvdb.org/39739"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T14:05:28.585Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2007-2060", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/2060"}, {"name": "zblog-zblog-information-disclosure(34673)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34673"}, {"name": "20070601 Z-Blog 1.7 Authentication Bypass Database Download Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/470238/100/0/threaded"}, {"name": "2776", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/2776"}, {"name": "39739", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/39739"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-3083", "datePublished": "2007-06-06T10:00:00", "dateReserved": "2007-06-05T00:00:00", "dateUpdated": "2024-08-07T14:05:28.585Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:rainbowsoft:z-blog:1.7:*:*:*:*:*:*:*", "matchCriteriaId": "8489AA2E-3048-4D1D-9165-9F7766C47A41", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb."}, {"lang": "es", "value": "Z-Blog 1.7 almacena informaci\u00f3n sensible bajo la ra\u00edz de documentos web con control de acceso insuficiente, lo cual permite a atacantes remotos descargar una base de datos mediante una petici\u00f3n directa a zblog.mdb."}], "id": "CVE-2007-3083", "lastModified": "2024-11-21T00:32:22.207", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 7.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-06-06T10:30:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/39739"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2776"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/470238/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/2060"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34673"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/39739"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/2776"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/470238/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/2060"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34673"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}