CVEvulnerability
CVE-2009-4943
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-07-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via (1) a view_adrates action with an invalid uid parameter, which reveals the installation path in an error message; or (2) an adminlogin action with a crafted uid parameter, which reveals the version number.
Affected configurations
• impactsoftcompany adpeeps 8.5
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://forum.intern0t.net/exploits-vulnerabilities-pocs/1049-intern0t-adpeeps-8-5d1-cross-site-scripting-html-injection-vulnerabilities.html forum.intern0t.net
- http://www.securityfocus.com/archive/1/503855/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/503911/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50822 exchange.xforce.ibmcloud.com
- http://forum.intern0t.net/exploits-vulnerabilities-pocs/1049-intern0t-adpeeps-8-5d1-cross-site-scripting-html-injection-vulnerabilities.html forum.intern0t.net
- http://www.securityfocus.com/archive/1/503855/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/503911/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50822 exchange.xforce.ibmcloud.com