Design/Logic Flaw

2009-10-2716:30:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

87.1%

JSON

Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname (“%%%”) to _admin/index.php, which reveals the installation path and other information in an error message.

CPENameOperatorVersion
amiro.cmsle5.4.0.0
amiro.cmseq4.2.4
amiro.cmseq5.2
amiro.cmseq4.2.0.5
amiro.cmseq5.0.7
amiro.cmseq5.2.3
amiro.cmseq4.2.1.0
amiro.cmseq5.2.2
amiro.cmseq4.0.8.0
amiro.cmseq4.2.5

Name	Operator	Version
amiro.cms	le	5.4.0.0
amiro.cms	eq	4.2.4
amiro.cms	eq	5.2
amiro.cms	eq	4.2.0.5
amiro.cms	eq	5.0.7
amiro.cms	eq	5.2.3
amiro.cms	eq	4.2.1.0
amiro.cms	eq	5.2.2
amiro.cms	eq	4.0.8.0
amiro.cms	eq	4.2.5

Rows per page:

1-10 of 121

References

packetstormsecurity.org/0910-exploits/ONSEC-09-005.txt

secunia.com/advisories/37065

www.onsec.ru/vuln?id=12

www.vupen.com/english/advisories/2009/2967

exchange.xforce.ibmcloud.com/vulnerabilities/53894