CVE-2009-2134 pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information via an invalid url parameter, which reveals the installation path in an error message.
MediumCVSS 5.0
EPSS 2.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information via an invalid url parameter, which reveals the installation path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pivot | = 1.40.4 | No fix listed |
| pivot | = 1.40.7 | No fix listed |
References
- forum.intern0t.net exploit
- 20090612 [InterN0T] Pivot 1.40.4-7 - Multiple Vulnerabilities mailing-list
- 8941 exploit