Description

SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain link_date parameter to events.php, which reveals the path in an error message due to an unsupported argument type for the mktime function on Windows.

Remediation

References

CVE-2007-5128

Related Vulnerabilities

WordPress Plugin Ticketrilla:Client PHP Object Injection (1.0.1)

WordPress Plugin Post Pay Counter PHP Object Injection (2.730)

MySQL CVE-2014-6491 Vulnerability (CVE-2014-6491)

WordPress Plugin DMCA WaterMarker Cross-Site Scripting (1.0)

Oracle JRE CVE-2013-5831 Vulnerability (CVE-2013-5831)

Severity

Medium

Classification

CVE-2007-5128 CWE-20

Tags

Missing Update Known Vulnerabilities