← Vulnerability feed

Vulnerability record · CVE-2007-5172 · published 1 October 2007

CVE-2007-5172: Quicksilver forums information exposure vulnerability

Quicksilver Forums · Quicksilver Forums

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message.

5.0 CVSS 2.0 Medium EPSS 1.2% · top 32.6% CWE-200 · Information exposure
5.0CVSS 2.0 base score
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message.

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://forums.quicksilverforums.com/index.php?a=topic&t=1332 Patch
http://secunia.com/advisories/26998 Vendor Advisory
http://www.securityfocus.com/bid/25887
https://exchange.xforce.ibmcloud.com/vulnerabilities/36891
http://forums.quicksilverforums.com/index.php?a=topic&t=1332 Patch
http://secunia.com/advisories/26998 Vendor Advisory
http://www.securityfocus.com/bid/25887
https://exchange.xforce.ibmcloud.com/vulnerabilities/36891

Track CVE-2007-5172 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2008-7064Quicksilver forums path traversal vulnerabilityDirectory traversal vulnerability in the get_lang function in global.php in Quicksilver Forums 1.4.2 and earlier, as used in QSF Portal before 1.4.5,…EPSS 3.2%7.5CVE-2008-3601Quicksilver forums sql injection vulnerabilitySQL injection vulnerability in index.php in Quicksilver Forums 1.4.1 allows remote attackers to execute arbitrary SQL commands via the forums array p…EPSS 1.0%7.5CVE-2006-4824Quicksilver forums vulnerabilityPHP remote file inclusion vulnerability in lib/activeutil.php in Quicksilver Forums (QSF) 1.2.1 and earlier allows remote attackers to execute arbitr…EPSS 7.8%5.1CVE-2005-4030Quicksilver forums vulnerabilitySQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute arbitrary SQL commands via the HTTP_USER_AGENT head…EPSS 1.1%5.0CVE-2007-5171Quicksilver forums permissions and access controls vulnerabilityUnspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors.EPSS 1.2%5.9CVE-2025-68686FortiOS symbolic link patch bypass exposes sensitive informationFortiOS contains an information exposure flaw (CWE-200) that lets a remote unauthenticated attacker bypass the patch for the symbolic link persistenc…KEVEPSS 30%analysed7.5CVE-2026-20133Cisco Catalyst SD-WAN Manager insufficient file system restrictions expose dataCisco Catalyst SD-WAN Software has insufficient file system restrictions that let an attacker read sensitive files on the underlying operating system…KEVEPSS 32%analysed7.5CVE-2025-31125Vite dev server improper access control exposes arbitrary filesVite's dev server fails to restrict file access when a request uses the ?inline&import or ?raw?import query patterns, allowing content of files that …KEVEPSS 65%analysed

Source: NIST National Vulnerability Database (record CVE-2007-5172), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.