CVE-2007-5129

MEDIUM 5.0CVE-2007-5129 · Published 27/09/2007 · updated 16/06/2026

In short

CVE-2007-5129 is a MEDIUM (CVSS 5.0) vulnerability affecting simpgb (boesch-it).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simpgb boesch-it	`= 1.46.02`	No fix yet

Description

SimpGB 1.46.02 stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) obtain sensitive configuration information via a direct request for admin/cfginfo.php; and (2) download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc.

References

forum.boesch-it.de/viewtopic.php · Patch
osvdb.org/40612
osvdb.org/40613
secunia.com/advisories/26974 · Vendor Advisory
netvigilance.com/advisory0065
netvigilance.com/advisory0066
securityfocus.com/archive/1/480590/100/0/threaded
securityfocus.com/archive/1/480592/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/36776
exchange.xforce.ibmcloud.com/vulnerabilities/36777

More vulnerabilities in simpgb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free