CVE-2007-5113 | BDVDB-2026-26544 Detail

Description#

report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web server logs) via certain modified query parameters, as demonstrated using the profile, rid, prefs, n, vid, bd, ed, dt, and gtype parameters, a different vulnerability than CVE-2007-5112.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/26037
http://securityvulns.ru/Sdocument90.html
http://ha.ckers.org/blog/20070823/xss-and-possible-information-disclosure-in-urchin/
http://websecurity.com.ua/1283/
http://www.securityfocus.com/archive/1/482006/100/0/threaded

Exploit#

No public exploit known

History#

Version 12007-09-26Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.