CVE-2007-4072: Tincan Webbler CMS

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive information by viewing the HTML source, as demonstrated by viewing the source generated from index.php.

Affected products

• Tincan Webbler CMS: up to and including 3.1.4

Published 2007-07-30. Last modified 2026-06-16.