CVE-2007-6512

Published: Dec 21, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

PHP MySQL Banner Exchange 2.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database information via a direct request to inc/lib.inc.

Affected (1)

Products: Php: Mysql Banner Exchange

Php

1 product

Mysql Banner Exchange

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Php Mysql Banner Exchange	Version 2.2.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CWE-264

References (10)

http://osvdb.org/40232

Source: cve@mitre.org

http://securityreason.com/securityalert/3478

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/485098/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/485178/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/485266/100/0/threaded

Source: cve@mitre.org

http://osvdb.org/40232