CVE-2007-1597: Unclassified Newsboard

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Unclassified NewsBoard 1.6.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain (1) the board log via a direct request for logs/board-YYYY-MM-DD.log, (2) the mail and private message (PM) log via a direct request for logs/email-YY-MM-DD-HH-MM-SS.log, (3) the SQL error message log via a direct request for logs/error-YY-MM.log, and (4) the IP log via a direct request for logs/ip.log.

Affected products

• Unclassified Newsboard Unclassified Newsboard: version 1.6.3 only

Published 2007-03-22. Last modified 2026-06-16.