medium5.0
CVE-2007-3173
Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to…
Impact
Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to '[' and ']' characters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Almnzm | Almnzm | All versions |
References
- NVD record
- CVE.org record
- http://osvdb.org/38338
- http://www.securityfocus.com/archive/1/469911/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34574
- http://osvdb.org/38338
- http://www.securityfocus.com/archive/1/469911/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34574