CVE-2007-4089

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.4%

from disclosure to weapon0 days

Published on NVDJul 30

1st PoCJul 25

exploitation probability

2.4%top 18% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to (1) forum.php, (2) cp.php, and possibly other unspecified components.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/30388 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/30387

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lostmon.blogspot.com/2007/07/vikingboard-debug-information.html http://lostmon.blogspot.com/2007/07/vikingboard-multiple-cross-site.html http://osvdb.org/36902 http://osvdb.org/36903 http://secunia.com/advisories/26196 http://secwatch.org/advisories/1018567/https://exchange.xforce.ibmcloud.com/vulnerabilities/35602 http://www.securityfocus.com/bid/25060