CVE-2007-2066 Information disclosure in n/a

What is CVE-2007-2066?

CVE-2007-2066 is a medium-severity vulnerability in n/a, published on 18 Apr 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

UseBB before 1.0.6 allows remote attackers to obtain sensitive information via a request with unspecified GET or POST parameters to an unspecified script, which reveals the path in an error message.

Which versions are affected by CVE-2007-2066?

It affects 1 product.

Products include Usebb Usebb.

How do I fix CVE-2007-2066?

No fix has been published for CVE-2007-2066 yet. Limit exposure of the affected software until one is available.

Is CVE-2007-2066 being exploited?

There is no known exploitation of CVE-2007-2066 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2020-8088 Auth bypass in n/a Critical 9.8
• CVE-2007-3963 Cross-site scripting in n/a Critical 9.3
• CVE-2011-3612 Cross-site request forgery in UseBB High 8.8
• CVE-2005-2439 SQL injection in n/a High 7.5
• CVE-2011-3611 Path traversal in UseBB High 7.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as CVE-2007-0691, GHSA-q76w-4rrf-hxxm.