CVE-2007-3191 Information disclosure in n/a
Remote attackers can obtain sensitive configuration information by accessing an unprotected phpinfo page in JFFNMS.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-3191?
CVE-2007-3191 is a critical vulnerability in n/a, published on 12 Jun 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function.
Which versions are affected by CVE-2007-3191?
It affects 1 product.
Products include Jffnms Just for Fun Network Management System.
How do I fix CVE-2007-3191?
Upgrade to a fixed version.
Is CVE-2007-3191 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-3191 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-gp67-3fvq-8r37.