CVE-2007-0078

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/blankmaster.mdb.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jan 5, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-00797.8rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database CVE-2007-00806.6Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the CVE-2007-00816.8Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpap CVE-2007-00826.5users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated CVE-2007-00836.8Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a CVE-2007-00846.6Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long M CVE-2007-00856.0Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when the kernel is compiled CVE-2007-00867.8The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of servic CVE-2007-00877.8Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows remote attackers to c CVE-2007-00885.0Multiple directory traversal vulnerabilities in openmedia allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) src p CVE-2007-00897.5jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database CVE-2007-00907.5WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a data