VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jul 9, 2008· Updated Jun 16, 2026

CVE-2007-3650

CVE-2007-3650

Description

myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached through index.php; (2) a direct request to common.php; and (3) a mode array parameter in the query string to login.php, which reveal the installation path in various error messages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Mywebland/Mybloggie2 versions
    cpe:2.3:a:mywebland:mybloggie:2.1.6:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mywebland:mybloggie:2.1.6:*:*:*:*:*:*:*
    • (no CPE)range: =2.1.6

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.