CVE-2007-1300

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-07 · updated 2026-06-16

Description

DOURAN Software Technologies ISPUtil 3.32.84.1, and possibly earlier versions, stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user and reseller data via a direct request for scripts/activesessions.ini. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Douran Software Technologies Isputil: 3.32.84.1

References

http://osvdb.org/33845
http://secunia.com/advisories/24304
https://exchange.xforce.ibmcloud.com/vulnerabilities/32800
http://osvdb.org/33845
http://secunia.com/advisories/24304
https://exchange.xforce.ibmcloud.com/vulnerabilities/32800

Get alerted when CVE-2007-1300 or the next vulnerability affects your stack