CVE-2007-1597

no score yetEPSS 1.3%

unclassified newsboard unclassified newsboard: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days.

Unclassified NewsBoard 1.6.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain (1) the board log via a direct request for logs/board-YYYY-MM-DD.log, (2) the mail and private message (PM) log via a direct request for logs/email-YY-MM-DD-HH-MM-SS.log, (3) the SQL error message log via a direct request for logs/error-YY-MM.log, and (4) the IP log via a direct request for logs/ip.log.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
Published: 2007-03-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

unclassified_newsboard:unclassified_newsboard

References

http://osvdb.org/35201
http://www.securityfocus.com/archive/1/463186/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/33150
http://osvdb.org/35201
http://www.securityfocus.com/archive/1/463186/100/0/threaded

Check your stack JSON