NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an…

Description

NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error message, related to the display_errors setting in (1) Common.php and (2) imageresizer.php, and (3) the use of __FILE__ in error reporting by imageresizer.php; and (4) via certain requests that reveal the table name and complete query, related to the Halt_On_Error setting in Mysql_db.php.

Scores

EPSS (exploitation in 30 days)

1.8% · top 21% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (8)

• 20070621 NetClassifieds [multiple vulnerabilities] (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• netclassifieds-multi-information-disclosure(34997) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 24584 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 38565 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 38566 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 38567 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 2824 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
• 38564 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2007-3356](https://trackcve.app/badge/CVE-2007-3356.svg)](https://trackcve.app/cve/CVE-2007-3356)

Record last updated 7 Aug 2024, 14:14 UTC.