CVE-2009-2332: Cms.tut.su CMS Chainuk

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to index.php or (2) a nonexistent folder name in the id parameter to admin/admin_delete.php, which reveals the installation path in an error message.

Affected products

• Cms.tut.su CMS Chainuk: up to and including 1.2

Published 2009-07-05. Last modified 2026-06-16.