Vulnerability record · CVE-2007-3365 · published 22 June 2007
CVE-2007-3365: Myserverproject myserver vulnerability
MMyserverproject · Myserver
MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information (script source code) via a modified extension, as demonstrated by post.mscgI.
Description
MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information (script source code) via a modified extension, as demonstrated by post.mscgI.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://osvdb.org/37505 | Broken Link |
| http://secunia.com/advisories/25754 | Broken LinkVendor Advisory |
| http://securityreason.com/securityalert/2827 | Third Party Advisory |
| http://www.securityfocus.com/archive/1/471914/100/0/threaded | Broken LinkThird Party AdvisoryVDB Entry |
| http://www.securityfocus.com/bid/24571 | Broken LinkThird Party AdvisoryVDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/34977 | Third Party AdvisoryVDB Entry |
| http://osvdb.org/37505 | Broken Link |
| http://secunia.com/advisories/25754 | Broken LinkVendor Advisory |
| http://securityreason.com/securityalert/2827 | Third Party Advisory |
| http://www.securityfocus.com/archive/1/471914/100/0/threaded | Broken LinkThird Party AdvisoryVDB Entry |
| http://www.securityfocus.com/bid/24571 | Broken LinkThird Party AdvisoryVDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/34977 | Third Party AdvisoryVDB Entry |
Track CVE-2007-3365 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2007-3365), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
