CVE-2009-3802: Amirocms Amiro.cms

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname ("%%%") to _admin/index.php, which reveals the installation path and other information in an error message.

Affected products

• Amirocms Amiro.cms: up to and including 5.4.0.0; version 4.0.8.0 only; version 4.2.0.5 only; version 4.2.1.0 only; version 4.2.2.0 only; version 4.2.3.0 only; …

Published 2009-10-27. Last modified 2026-06-16.