Description
The b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS before 2.0.18 does not check permissions, which allows remote attackers to read the comments in restricted modules.
Unscored
CVE-2007-6675
EUVD-2007-6639GHSA-ffmc-h26p-q9qj
The b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS before 2.0.18 does not check permissions, wh…
Published Jan 8, 2008 · Updated Sep 16, 2024 · Assigned by mitre