What is CVE-2007-3650?

CVE-2007-3650 is a medium-severity vulnerability in Mywebland Mybloggie, classified under Information Disclosure. CVSS score: 5.3/10. Published 2008-07-09.

How severe is CVE-2007-3650?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Mywebland Mybloggie

CVE-2007-3650

myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached through index.php; (2) a direct request to common.php; and (3) a mode array parameter in the query string to login.php, which reveal the installation path in various error messages.

Vulnerability class: Information Disclosure

EPSS: 0.012 (63.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Mywebland Mybloggie — versions 2.1.6
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2007-3650?: CVE-2007-3650 is a medium-severity vulnerability in Mywebland Mybloggie, classified under Information Disclosure. CVSS score: 5.3/10. Published 2008-07-09.
How severe is CVE-2007-3650?: Medium severity. CVSS v3 base score is 5.3 out of 10.