CVE-2009-2134

Description

pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information via an invalid url parameter, which reveals the installation path in an error message.

Affected Platforms

Weakness Type

CWE-200

References

• http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multi…
• http://www.securityfocus.com/archive/1/504300/100/0/threaded
• https://www.exploit-db.com/exploits/8941
• http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multi…
• http://www.securityfocus.com/archive/1/504300/100/0/threaded
• https://www.exploit-db.com/exploits/8941