Unrated severityNVD Advisory· Published Oct 27, 2009· Updated Apr 23, 2026
CVE-2009-3802
CVE-2009-3802
Description
Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname ("%%%") to _admin/index.php, which reveals the installation path and other information in an error message.
Affected products
12cpe:2.3:a:amirocms:amiro.cms:*:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:amirocms:amiro.cms:*:*:*:*:*:*:*:*range: <=5.4.0.0
- cpe:2.3:a:amirocms:amiro.cms:4.0.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:4.2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:4.2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:4.2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:4.2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:4.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:4.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:5.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:5.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:amirocms:amiro.cms:5.2.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- packetstormsecurity.org/0910-exploits/ONSEC-09-005.txtnvdExploit
- www.onsec.ru/vulnnvdExploit
- secunia.com/advisories/37065nvdVendor Advisory
- www.vupen.com/english/advisories/2009/2967nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/53894nvd
News mentions
0No linked articles in our index yet.