CVE-2008-6981 index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid results_per_page parameter, which leaks the path in an error message. NOTE: t...
MediumCVSS 5.0
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid results_per_page parameter, which leaks the path in an error message. NOTE: this issue might be resultant from a separate SQL injection vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpadultsite cms | = 2.3.2 | No fix listed |
References
- www.davidsopas.com
- 20080907 phpAdultSite CMS flaws mailing-list
- phpadultsitecms-asarchives-path-disclosure(44924) vdb-entry