CVE-2007-3173

CVE-2007-3173 describes an information disclosure vulnerability in Almnzm, where remote attackers can obtain sensitive information by sending an activateorder request with an invalid orderid parameter to index.php, likely due to special characters. With a CVSS score of 5.0 (medium severity), this vulnerability has a network attack vector, low attack complexity, and a potential impact of partial confidentiality loss. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion, suggesting a low current threat level.