CVE-2007-1044
Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin...
Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed of the admin/ directory name and an arbitrary filename ending in ".js." NOTE: it was later reported that this issue had been addressed by 5.1.2.
Exploit likelihood
What each source reports
NVD Score used
Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed of the admin/ directory name and an arbitrary filename ending in ".js." NOTE: it was later reported that this issue had been addressed by 5.1.2.
- Record
CVE-2007-1044- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed of the admin/ directory name and an arbitrary filename ending in ".js." NOTE: it was later reported that this issue had been addressed by 5.1.2.
- Record
CVE-2007-1044- Updated
- 2026-11-02
EUVDEUVD-2007-1041 No score
Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed of the admin/ directory name and an arbitrary filename ending in ".js." NOTE: it was later reported that this issue had been addressed by 5.1.2.
- Record
EUVD-2007-1041- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cxfm-jhch-9rxg No score
Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin...
Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed of the admin/ directory name and an arbitrary filename ending in ".js." NOTE: it was later reported that this issue had been addressed by 5.1.2.
- Record
GHSA-cxfm-jhch-9rxg- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Powerschool 4.3.6/5.1.2 - JavaScript File Request Information Disclosure | 2007-02-19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1044 is a medium vulnerability (CVSS 5.0) in Pearson Education Powerschool, published February 21, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.80%, the 95th percentile. No source names a fixed version.
References
osvdb.org/33741
securityreason.com/securityalert/2276
exchange.xforce.ibmcloud.com/vulnerabilities/32569
securityfocus.com/archive/1/484569/100/200/threaded
nvd.nist.gov/vuln/detail/CVE-2007-1044
github.com/advisories/GHSA-cxfm-jhch-9rxg