CVE-2009-2303

Published: Jul 2, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

index.php in Aardvark Topsites PHP 5.2.1 and earlier allows remote attackers to obtain sensitive information via a negative integer value for the start parameter in a search action, which reveals the installation path in an error message.

Affected (8)

Products: Avatic: Aardvark Topsites Php

Avatic

1 product

Aardvark Topsites Php

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Avatic Aardvark Topsites Php	Up to 5.2.1
Avatic Aardvark Topsites Php	Version 4.0.2
Avatic Aardvark Topsites Php	Version 4.1.1
Avatic Aardvark Topsites Php	Version 4.2.2
Avatic Aardvark Topsites Php	Version 5.0.3
Avatic Aardvark Topsites Php	Version 5.1.2
Avatic Aardvark Topsites Php	Version 5.2.0
Avatic Aardvark Topsites Php	Version 5