CVE-2007-5934

The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which…

published November 13, 2007

CVSS
—
EPSS
2%
Percentile
75.9
In the wild
Unconfirmed
What it is

The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2 as an indirect proxy or obtain sensitive information via a URL into a form field in an MDB2 application, as demonstrated by a file:// URL or a URL for an intranet web site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01621 · 75.9th percentile
Published
2007-11-13T22:00Z
EPSS history
Timeline
  • 13 NOV 22:00Z
    The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which…
    cvelistv5