Unrated severityNVD Advisory· Published Feb 27, 2007· Updated Jun 16, 2026

CVE-2007-1128

Description

shopkitplus allows remote attackers to obtain sensitive information via a request to (1) events.php with a curmonth[]=01 query string or (2) enc/stylecss.php with a changetheme[]= query string, which reveals the path in various error messages.

Affected products

Watersweb Shops/Shop Kit Plus
cpe:2.3:a:watersweb_shops:shop_kit_plus:initial:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

osvdb.org/33756nvd
osvdb.org/33757nvd
securityreason.com/securityalert/2295nvd
www.securityfocus.com/archive/1/461071/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/32661nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000