Description

SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain link_date parameter to events.php, which reveals the path in an error message due to an unsupported argument type for the mktime function on Windows.

Remediation

References

CVE-2007-5128

Related Vulnerabilities

WordPress Plugin PayPlus Payment Gateway SQL Injection (7.0.7)

WordPress Plugin Ninja Forms with File Uploads Extension Cross-Site Scripting (3.3.12)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4546)

WordPress Plugin WP Last Modified Info Cross-Site Scripting (1.6.5)

MediaWiki CVE-2023-36674 Vulnerability (CVE-2023-36674)

Severity

Medium

Classification

CVE-2007-5128 CWE-20

Tags

Missing Update Known Vulnerabilities