CVE-2007-3290

CRITICAL 9.3CVE-2007-3290 · Published 20/06/2007 · updated 16/06/2026

In short

CVE-2007-3290 is a CRITICAL (CVSS 9.3) vulnerability affecting livecms (livecms).
Chance of exploitation in the next 30 days (EPSS): 3.1%, higher than 87.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
livecms livecms	`= 3.0= 3.3= 3.3_rc1= 3.3_rc2= 3.4= 3.4a`	No fix yet

Description

categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the cid parameter, which reveals the path in a forced SQL error message.

References

osvdb.org/37490
secunia.com/advisories/25744
securityfocus.com/bid/24580
exchange.xforce.ibmcloud.com/vulnerabilities/35147
exploit-db.com/exploits/4082

More vulnerabilities in livecms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free