Back to search
CVE-2009-2304
Published: Jul 2, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to obtain sensitive information via a nonexistent account name in the u parameter in a rate action, which reveals the installation path in an error message.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20090625 Report vulnerabilities
mailing-list
x_refsource_BUGTRAQ
aardvarktopsitesphp-index-info-disclosure(51392)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now