Unscored CVE-2009-2304 EUVD-2009-2300GHSA-c525-q4hc-xc2v

index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to obtain sensitive information via a nonexistent account name…

Published Jul 2, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to obtain sensitive information via a nonexistent account name in the u parameter in a rate action, which reveals the installation path in an error message.

References

20090625 Report vulnerabilities mailing-list
aardvarktopsitesphp-index-info-disclosure(51392) vdb-entry
http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/