CVE-2008-6981

index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid results_per_page parameter, which leaks the path in an error message. NOTE: this issue might be resultant from a separate SQL injection vulnerability.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.03% chance of exploitation in the next 30 days, 61th percentile

Published

2009-08-18

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.davidsopas.com/2008/09/phpadult-cms-exploit/

References

• CVE Record
• NVD entry

Related

• CVE-2008-6980
• CVE-2008-6982
• CVE-2008-6979
• CVE-2008-6983
• CVE-2008-6978
• CVE-2008-6985