medium5.0Public exploit code
CVE-2009-3756
phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) the show action in advancedsear…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpbms 0.96 - Multiple Vulnerabilities2009-07-10 · webapps · php · Verified
Impact
phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) the show action in advancedsearch.php, and (4) choicelist.php, which reveals the installation path in an error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kreotek | Phpbms | Version 0.96 |