CVE-2009-2115: Skybluecanvas

Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days.

admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id parameter, which reveals the installation path in an error message.

Affected products

• Skybluecanvas Skybluecanvas: version 1.1 only

Published 2009-06-18. Last modified 2026-06-16.