CVE-2007-2746: Plain Black Webgui

Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not properly use data structures containing privilege information, which allows remote authenticated users to obtain sensitive information or possibly have other unspecified impact.

Affected products

• Plain Black Webgui: up to and including 7.3.14

Published 2007-05-17. Last modified 2026-06-16.