← Database

CVE-2007-3173

MEDIUM CVSS: 5.0 Published: 2007-06-11 Modified: 2026-06-16

Description

Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to '[' and ']' characters.

Affected Platforms

Almnzm Almnzm

Weakness Type

NVD-CWE-Other

References