Unrated severityNVD Advisory· Published Oct 27, 2009· Updated Jun 16, 2026
CVE-2009-3802
CVE-2009-3802
Description
Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname ("%%%") to _admin/index.php, which reveals the installation path and other information in an error message.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:a:amirocms:amiro.cms:*:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:amirocms:amiro.cms:*:*:*:*:*:*:*:*range: <=5.4.0.0
- cpe:2.3:a:amirocms:amiro.cms:4.0.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:4.2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:4.2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:4.2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:4.2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:4.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:4.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:5.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:5.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:5.2.3:*:*:*:*:*:*:*
- (no CPE)range: <=5.4.0.0
Patches
Vulnerability mechanics
References
5- packetstormsecurity.org/0910-exploits/ONSEC-09-005.txtnvdExploit
- www.onsec.ru/vulnnvdExploit
- secunia.com/advisories/37065nvdVendor Advisory
- www.vupen.com/english/advisories/2009/2967nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/53894nvd
News mentions
0No linked articles in our index yet.