CoreCVE
Back

MEDIUM

myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached through index.php; (2) a direct request to common.php; and (3) a mode array parameter in the query string to login.php, which reveal the installation path in various error messages

Published Jul 9, 2008

Description

myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached through index.php; (2) a direct request to common.php; and (3) a mode array parameter in the query string to login.php, which reveal the installation path in various error messages.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 9, 2008
Updated Apr 3, 2025
Reserved Jul 10, 2007
Link CVE-2007-3650
CISA Vulnrichment
Updated Apr 3, 2025
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2007-3650
Red Hat
Severity n/a
Public date n/a
Links CVE-2007-3650