index.php in Aardvark Topsites PHP 5.2.1 and previous versions allows remote malicious users to obtain sensitive information via a negative integer value for the start parameter in a search action, which reveals the installation path in an error message.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
avatic aardvark topsites php 5 |
||
avatic aardvark topsites php 5.1.2 |
||
avatic aardvark topsites php 4.0.2 |
||
avatic aardvark topsites php 4.2.2 |
||
avatic aardvark topsites php 4.1.1 |
||
avatic aardvark topsites php 5.2.0 |
||
avatic aardvark topsites php 5.0.3 |
||
avatic aardvark topsites php |