CVE-2008-6981

Published: Aug 19, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid results_per_page parameter, which leaks the path in an error message. NOTE: this issue might be resultant from a separate SQL injection vulnerability.

Affected (1)

Products: Phpadultsite: Phpadultsite Cms

1 product

Phpadultsite Cms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Phpadultsite Phpadultsite Cms	Version 2.3.2

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

http://www.davidsopas.com/2008/09/phpadult-cms-exploit/

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/496069/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/44924

Source: cve@mitre.org

http://www.davidsopas.com/2008/09/phpadult-cms-exploit/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/496069/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/44924

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.