CVE-2007-6675

Published: Jan 8, 2008
Updated: Apr 13, 2023
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2007-6675" target="_blank" rel="noopener"> CVE-2007-6675
Severity: Medium
Exploit:

The b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS before 2.0.18 does not check permissions, which allows remote attackers to read the comments in restricted modules.