Vulnerability Database

296,317

Total vulnerabilities in the database

CVE-2007-5942

Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with (1) a certain func parameter value; or (2) certain func, jid, page, and limit parameter values; which reveals the path in various error messages.

  • Published: Nov 14, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-5942
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
bandersnatch / bandersnatch 0.4 0.4.x