CVE-2007-3774: Dvbbs

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Dvbbs 7.1.0 SP1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Data/Dvbbs7.mdb.

Affected products

• Dvbbs Dvbbs: version 7.1.0_sp1 only

Published 2007-07-15. Last modified 2026-06-16.