CVE-2007-0259: Ezboxx Portal System

High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message.

Affected products

• Ezboxx Ezboxx Portal System: up to and including beta_0.7.6

Published 2007-01-16. Last modified 2026-06-16.