Back to CVE Browser

CVE-2007-3356

HIGH

7.8

CVSS Severity Score

EPSS Score0.0250%

EPSS Percentile38.70th

PublishedJun 22, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error message, related to the display_errors setting in (1) Common.php and (2) imageresizer.php, and (3) the use of __FILE__ in error reporting by imageresizer.php; and (4) via certain requests that reveal the table name and complete query, related to the Halt_On_Error setting in Mysql_db.php.

Affected Platforms (CPE)

📦

Scriptdevelopers.net

Netclassifieds

= 1.0.1

References & Advisories

🔗 http://osvdb.org/38564

🔗 http://osvdb.org/38565

🔗 http://osvdb.org/38566

🔗 http://osvdb.org/38567

🔗 http://securityreason.com/securityalert/2824

🔗 http://www.securityfocus.com/archive/1/471944/100/0/threaded

🔗 http://www.securityfocus.com/bid/24584

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/34997

Related Vulnerabilities

CVE-2007-335710.0

NetClassifieds Premium Edition does not use encryption for (1) stored passwords or (2) sensitive data, which might allow attackers...

CVE-2005-39787.5

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6...

CVE-2007-33547.5

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands ...

CVE-2007-33554.3

Multiple cross-site scripting (XSS) vulnerabilities in NetClassifieds Premium Edition allow remote attackers to inject arbitrary w...