CVE-2009-2332: Exposure of Sensitive Information to an Unauthorized Actor

CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via 1 a crafted id parameter to index.php or 2 a nonexistent folder name in the id parameter to admin/admindelete.php, which reveals the installation path in an error message...

CMS Chainuk <= 1.2 Multiple Remote Vulnerabilities

No description provided by source. CMS Chainuk = v.1.2 Vulns Home: Cms.tut.su Dork: "Cms.tut.su, 2009 g." eLwauxc 14.06.2 LFI /index.php --------------------------------------------------------------------------- 6: if isset$GET 'id' 7: 8: color=white$id = $GET 'id';/color 9: 10: else 11: 12: $id...