CVE-2007-0155

HIGH 7.5CVE-2007-0155 · Published 09/01/2007 · updated 16/06/2026

In short

CVE-2007-0155 is a HIGH (CVSS 7.5) vulnerability affecting harikaonline (harikaonline).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
harikaonline harikaonline	`= 2.0`	No fix yet

Description

HarikaOnline 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for harikaonline.mdb.

References

osvdb.org/33410
securityreason.com/securityalert/2125
securityfocus.com/archive/1/456238/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/31339

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free