Unrated severityNVD Advisory· Published Sep 26, 2007· Updated Apr 23, 2026

CVE-2007-5113

Description

report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web server logs) via certain modified query parameters, as demonstrated using the profile, rid, prefs, n, vid, bd, ed, dt, and gtype parameters, a different vulnerability than CVE-2007-5112.

Affected products

Roi Revolution/Urchin
cpe:2.3:a:roi_revolution:urchin:*:*:*:*:*:*:*:*
Range: <=5.7.03

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

ha.ckers.org/blog/20070823/xss-and-possible-information-disclosure-in-urchin/nvd
securityvulns.ru/Sdocument90.htmlnvd
websecurity.com.ua/1283/nvd
www.securityfocus.com/archive/1/482006/100/0/threadednvd
www.securityfocus.com/bid/26037nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000