Skip to content
OpenAdvisories
Unscored CVE-2007-5128 EUVD-2007-5109GHSA-qc4h-hwgp-rx7q

SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain link_dat…

Published Sep 27, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain link_date parameter to events.php, which reveals the path in an error message due to an unsupported argument type for the mktime function on Windows.

References