Unrated severityNVD Advisory· Published Jun 22, 2007· Updated Apr 23, 2026

CVE-2007-3356

Description

NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error message, related to the display_errors setting in (1) Common.php and (2) imageresizer.php, and (3) the use of __FILE__ in error reporting by imageresizer.php; and (4) via certain requests that reveal the table name and complete query, related to the Halt_On_Error setting in Mysql_db.php.

Affected products

Scriptdevelopers.net/Netclassifieds
cpe:2.3:a:scriptdevelopers.net:netclassifieds:1.0.1:*:premium:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

osvdb.org/38564nvd
osvdb.org/38565nvd
osvdb.org/38566nvd
osvdb.org/38567nvd
securityreason.com/securityalert/2824nvd
www.securityfocus.com/archive/1/471944/100/0/threadednvd
www.securityfocus.com/bid/24584nvd
exchange.xforce.ibmcloud.com/vulnerabilities/34997nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000