CVE-2007-1597

MEDIUM 5.0CVE-2007-1597 · Published 22/03/2007 · updated 16/06/2026

In short

CVE-2007-1597 is a MEDIUM (CVSS 5.0) vulnerability affecting unclassified newsboard (unclassified newsboard).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 69.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unclassified newsboard unclassified_newsboard	`= 1.6.3`	No fix yet

Description

Unclassified NewsBoard 1.6.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain (1) the board log via a direct request for logs/board-YYYY-MM-DD.log, (2) the mail and private message (PM) log via a direct request for logs/email-YY-MM-DD-HH-MM-SS.log, (3) the SQL error message log via a direct request for logs/error-YY-MM.log, and (4) the IP log via a direct request for logs/ip.log.

References

More vulnerabilities in unclassified newsboard

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free