CVE-2007-3173: Almnzm

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to '[' and ']' characters.

Affected products

• Almnzm Almnzm: any version

Published 2007-06-11. Last modified 2026-06-16.