mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-01 11:01:35 +02:00
817 B
817 B
CVE-2009-4175
Description
CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an invalid date value in the from_date_day parameter to search.php, which reveals the installation path in an error message.
POC
Reference
- http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt
- http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt
Github
No PoCs found on GitHub currently.