CVE-2011-3754

Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/sef.php and certain other files...

CVE-2011-3756

MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files...

CVE-2011-3735

Escort Agency CMS aka escort-agency-cms allows remote attackers to obtain sensitive information via crafted array parameters in a request to a .php file, which reveals the installation path in an error message, as demonstrated by makethumb.php and certain other files...

CVE-2011-3752

CVE-2011-3752 affects LimeSurvey 1.90+ build9642-20101214. The issue is an information disclosure where remote attackers can trigger a direct request to a PHP file (e.g., admin/statistics.php) that reveals the installation path in an error message. This is described across multiple documents (NVD...

CVE-2011-3701

CVE-2011-3701 affects AlegroCart 1.2.3. The issue allows remote attackers to obtain sensitive information by requesting a PHP file directly, causing an error message that reveals the installation path (demonstrated by common.php and related files). The documents do not provide remediation steps o...

CVE-2011-3703

AneCMS 1.0 is affected by an information disclosure vulnerability: remote attackers can cause a PHP file to reveal the installation path in an error message (e.g., via widgets/menu/index.php and related files). This is a direct request/file-path leakage issue, not an authentication bypass or code...

CVE-2011-3704

CVE-2011-3704 affects appRain 0.1.0, where a direct request to a PHP file can disclose the installation path in an error message (demonstrated via cron.php). This is an information-disclosure flaw that enables remote attackers to learn sensitive directory structure information. The public records...

CVE-2011-3708

CVE-2011-3708 affects Automne 4.0.2. A remote attacker can obtain sensitive information via a direct request to a .php file, with the installation path revealed in an error message (shown by admin/page-redirect-info.php). The connected documents confirm the exposure but do not provide exploitatio...

CVE-2011-3715

CVE-2011-3715 affects ClanTiger 1.1.3. Affected component: PHP files (e.g., widgets/statistics/statistics.php) that disclose the installation path in an error message when directly requested. This enables remote information disclosure. Root cause: direct access to certain PHP files leaks path inf...

CVE-2011-3717

CVE-2011-3717 affects ClipBucket 2.0.9. Affected component is server-side PHP files; a remote attacker can trigger a direct request to a PHP file (e.g., plugins/signup_captcha/signup_captcha.php) and cause an error message that reveals the installation path, exposing sensitive information. The de...

CVE-2011-3718

CMS Made Simple (CMSMS) 1.9.2 is affected by CVE-2011-3718. A remote attacker can obtain sensitive information by directly requesting a PHP file (e.g., modules/TinyMCE/TinyMCE.module.php), resulting in an error message that reveals the installation path. The vulnerability is an information-disclo...

CVE-2011-3719

CVE-2011-3719 — CodeIgniter 1.7.2 information disclosure . The vulnerability allows remote attackers to obtain the installation path by requesting a direct .php file, causing an error message that reveals sensitive path information (as shown by system/scaffolding/views/view.php and related files)...

CVE-2011-3724

CubeCart 4.4.3 is affected by CVE-2011-3724. A remote attacker can obtain sensitive information by directly requesting certain PHP files (e.g., modules/shipping/USPS/calc.php), causing an error message that reveals the installation path. This constitutes partial confidentiality impact. The affect...

CVE-2011-3739

Freeway 1.5 Alpha is affected by an information-disclosure vulnerability where remote attackers can obtain the installation path by directly requesting certain PHP files (e.g., templates/Freeway/boxes/last_product.php). The issue stems from error messages revealing filesystem paths. Affected comp...

CVE-2011-3741

CVE-2011-3741 affects Ganglia 3.1.7 and allows remote attackers to disclose sensitive information by requesting certain .php files (e.g., host_view.php), causing error messages that reveal the installation path. The vulnerability is a file-path disclosure via direct access to PHP scripts. The pro...

CVE-2011-3754

CVE-2011-3754 affects Mambo 4.6.5. The vulnerability allows information disclosure via a direct request to a PHP file, where an error message reveals the installation path (e.g., includes/sef.php). Impact is partial confidentiality loss. The technical details do not specify a patch or workaround ...

CVE-2011-3758

CVE-2011-3758 affects the package “::mound::” version 2.1.6 . A remote attacker can obtain sensitive information by directly requesting a PHP file, causing an error message that reveals the installation path (e.g., lib/smarty/libs/sysplugins/smarty_internal_template.php and related files). The pr...

CVE-2011-3700

Vulnerability: CVE-2011-3700 in Advanced Electron Forum (AEF) 1.0.8. Issue: Remote attackers can disclose sensitive information by making a direct request to a PHP file (languages/english/deletetopic_lang.php), causing an error message that reveals the installation path. Impact: Information discl...

CVE-2011-3738

Feng Office 1.7.2 is affected by an information-disclosure vulnerability: a direct request to certain PHP files (e.g., public/upgrade/templates/layout.php) can reveal the installation path in an error message. Affected component: Feng Office PHP files; root cause: error message leakage. Impact: p...

CVE-2011-3698

AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/pollvote.php and certain other files...