Vulnerability Description
index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via (1) a view_adrates action with an invalid uid parameter, which reveals the installation path in an error message; or (2) an adminlogin action with a crafted uid parameter, which reveals the version number.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Impactsoftcompany | Adpeeps | 8.5 |
Related Weaknesses (CWE)
References
- http://forum.intern0t.net/exploits-vulnerabilities-pocs/1049-intern0t-adpeeps-8-
- http://www.securityfocus.com/archive/1/503855/100/0/threaded
- http://www.securityfocus.com/archive/1/503911/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50822
- http://forum.intern0t.net/exploits-vulnerabilities-pocs/1049-intern0t-adpeeps-8-
- http://www.securityfocus.com/archive/1/503855/100/0/threaded
- http://www.securityfocus.com/archive/1/503911/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50822
FAQ
What is CVE-2009-4943?
CVE-2009-4943 is a vulnerability with a CVSS score of 5.0 (MEDIUM). index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via (1) a view_adrates action with an invalid uid parameter, which reveals the installation path in an error message;...
How severe is CVE-2009-4943?
CVE-2009-4943 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-4943?
Check the references section above for vendor advisories and patch information. Affected products include: Impactsoftcompany Adpeeps.