NetSight
IP …
medium5.0Public exploit code

CVE-2007-3556

Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an include file c…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an include file containing account credentials via a direct request for config.inc.

Affected products

VendorProductAffected versions
DoubleflexLiesbeth Base Cms
All versions

References