Unscored CVE-2009-4943 EUVD-2009-4905GHSA-gm38-v67v-v4jx

index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via (1) a view_adrates action with an invalid uid parame…

Published Jul 22, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via (1) a view_adrates action with an invalid uid parameter, which reveals the installation path in an error message; or (2) an adminlogin action with a crafted uid parameter, which reveals the version number.

References

20090527 [InterN0T] AdPeeps 8.5d1 - XSS and HTML Injection Vulnerabilities mailing-list
http://forum.intern0t.net/exploits-vulnerabilities-pocs/1049-intern0t-adpeeps-8-5d1-cross-site-scripting-html-injection-vulnerabilities.html
20090528 Re: [InterN0T] AdPeeps 8.5d1 - XSS and HTML Injection Vulnerabilities mailing-list
adpeeps-index-path-disclosure(50822) vdb-entry