CVE-2009-2332

CMS Chainuk <1.2 - Info Disclosure

Title source: llm
STIX 2.1

Description

CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to index.php or (2) a nonexistent folder name in the id parameter to admin/admin_delete.php, which reveals the installation path in an error message.

Exploits (1)

exploitdb WORKING POC VERIFIED
by eLwaux · textwebappsphp
https://www.exploit-db.com/exploits/9069

References (3)

Core 3
Core References
Exploit vdb-entry x_refsource_osvdb
http://osvdb.org/55671
Exploit, Third Party Advisory exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/9069
Exploit vdb-entry x_refsource_osvdb
http://osvdb.org/55670

Scores

EPSS 0.0400
EPSS Percentile 88.5%

Details

CWE
CWE-200
Status published
Products (1)
cms.tut.su/cms_chainuk < 1.2
Published Jul 05, 2009
Tracked Since Feb 18, 2026