CVE-2009-4943: Impactsoftcompany Adpeeps

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via (1) a view_adrates action with an invalid uid parameter, which reveals the installation path in an error message; or (2) an adminlogin action with a crafted uid parameter, which reveals the version number.

Affected products

• Impactsoftcompany Adpeeps: version 8.5 only

Published 2010-07-22. Last modified 2026-06-16.