Vulnerabilities

TI-2007-04941 CVE-2007-5130 · GHSA-8hjp-49vf-w2fg

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via (1) an invalid…

LOW 22

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via (1) an invalid lang parameter to admin/index.php or (2) a direct request to admin/trailer.php, which reveals the path in various error messages.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.011 Published 2007-09-27 No fix listed CWE-20

TI-2007-04940 CVE-2007-5129 · GHSA-wrm6-9pmw-hhvh

SimpGB 1.46.02 stores sensitive information under the web root with insufficient access…

LOW 26

SimpGB 1.46.02 stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) obtain sensitive configuration information via a direct request for admin/cfginfo.php;…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01814 Published 2007-09-27 No fix listed CWE-200

Vulnerabilities

Filters

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via (1) an invalid…

SimpGB 1.46.02 stores sensitive information under the web root with insufficient access…