CVE-2011-3789

2011-09-2400:00:00

mitre

www.cve.org

phpwcms sensitive information disclosure

installation path

remote attackers

error message

AI Score

6.1

Confidence

Low

EPSS

0.003

Percentile

71.3%

JSON

phpwcms 1.4.7 r412 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by template/inc_script/frontend_render/disabled/majonavi.php and certain other files.