Lucene search
HistoryOct 01, 2007 - 8:17 p.m.
CVE-2007-5172
quicksilver forums
cve-2007-5172
information disclosure
database security
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.4%
Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message.
Affected configurations
Node
quicksilver_forumsquicksilver_forumsRange≤1.4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| quicksilver_forums:quicksilver_forums | quicksilver forums | le | 1.4.0 |
Related
cvelist
cvelist
CVE-2007-5172
2007-10-01 20:00:00
prion
prion
Default credentials
2007-10-01 20:17:00
nvd
nvd
CVE-2007-5172
2007-10-01 20:17:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.4%
Related for CVE-2007-5172