Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2007-6607 Details

Description

OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) shared/footer.php, (2) circ/mbr_fields.php, or (3) admin/custom_marc_form_fields.php, which reveals the path in various error messages.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://osvdb.org/41286 CVE
http://osvdb.org/41287 CVE
http://osvdb.org/41288 CVE
http://securityreason.com/securityalert/3502 CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/39295 CVE

see all 18 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-200Exposure of Sensitive Information to an Unauthorized Actor[email protected]

Affected Products

ProductVersions
openbiblio openbiblio
0.2
0.2.1
0.3
0.5.1
0.5.2

CPE

  • cpe:2.3:a:openbiblio:openbiblio:0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:openbiblio:openbiblio:0.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:openbiblio:openbiblio:0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:openbiblio:openbiblio:0.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:openbiblio:openbiblio:0.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:openbiblio:openbiblio:0.5.2_pre4:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2007-6607
NVD Published Date:
Dec 31, 2007
NVD Last Modified:
Jun 16, 2026
Source:
[email protected]
CVE-2007-6607 Details - Not Deferred