medium5.0
CVE-2007-5172
Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database pa…
Impact
Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quicksilver Forums | Quicksilver Forums | through 1.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://forums.quicksilverforums.com/index.php?a=topic&t=1332
- http://secunia.com/advisories/26998
- http://www.securityfocus.com/bid/25887
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36891
- http://forums.quicksilverforums.com/index.php?a=topic&t=1332
- http://secunia.com/advisories/26998
- http://www.securityfocus.com/bid/25887
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36891