CVE-2009-2304

Published: Jul 2, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to obtain sensitive information via a nonexistent account name in the u parameter in a rate action, which reveals the installation path in an error message.

Affected (7)

Products: Avatic: Aardvark Topsites Php

Avatic

1 product

Aardvark Topsites Php

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Avatic Aardvark Topsites Php	Up to 5.2.0
Avatic Aardvark Topsites Php	Version 4.0.2
Avatic Aardvark Topsites Php	Version 4.1.1
Avatic Aardvark Topsites Php	Version 4.2.2
Avatic Aardvark Topsites Php	Version 5.0.3
Avatic Aardvark Topsites Php	Version 5.1.2
Avatic Aardvark Topsites Php	Version 5