CVE-2007-0094

HIGH 7.5CVE-2007-0094 · Published 05/01/2007 · updated 16/06/2026

In short

CVE-2007-0094 is a HIGH (CVSS 7.5) vulnerability affecting sven moderow guestbook (sven moderow).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sven moderow guestbook sven_moderow	`= 0.3a`	No fix yet

Description

Sven Moderow GuestBook 0.3a stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for (1) gbook97.mdb or (2) gbook.mdb in ~db/.

References

aria-security.com/forum/showthread.php · Exploit
osvdb.org/33363
securityreason.com/securityalert/2105
securityfocus.com/archive/1/455788/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/31245

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free