CVE-2007-1167

Published: Mar 2, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter.

Affected (1)

Products: Dzcp: Dev!l'z Clanportal

Dzcp

1 product

Dev!l'z Clanportal

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dzcp Dev!l'z Clanportal	Up to 1.4.5

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://osvdb.org/33372

Source: cve@mitre.org

http://secunia.com/advisories/24260

Source: cve@mitre.org

PatchVendor Advisory

http://www.dzcp.de/inc/tinymce_files/Downloads/dzcp_update/notes_1.4.6.txt

Source: cve@mitre.org

http://www.securityfocus.com/bid/22660

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2007/0695

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3357

Source: cve@mitre.org

http://osvdb.org/33372