PT-2011-4652

Name of the Vulnerable Software and Affected Versions OpenBlog version 1.2.1 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as "system/scaffolding/views/view.php", which reveals...

CVE-2011-3789: Exposure of Sensitive Information to an Unauthorized Actor

phpwcms 1.4.7 r412 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by template/incscript/frontendrender/disabled/majonavi.php and certain other files...

PT-2011-4640

Name of the Vulnerable Software and Affected Versions kPlaylist version 1.8.502 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, requesting...

PT-2011-4595

Name of the Vulnerable Software and Affected Versions Arctic Fox CMS version 0.9.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as acp/includes/edit.inc.php, which reveals the...

PT-2011-4643

Name of the Vulnerable Software and Affected Versions LinPHA version 1.3.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing certain files, such as "viewer.php", which reveals the installation path in a...

CVE-2011-3707: Exposure of Sensitive Information to an Unauthorized Actor

JanRain PHP OpenID library aka php-openid 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Auth/Yadis/Yadis.php and certain other files...

CVE-2011-3730: Exposure of Sensitive Information to an Unauthorized Actor

Drupal 7.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/simpletest/tests/upgrade/drupal-6.upload.database.php and certain other files...

CVE-2011-3695: Exposure of Sensitive Information to an Unauthorized Actor

111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by footer.php and certain other files...

CVE-2011-3705: Exposure of Sensitive Information to an Unauthorized Actor

Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by acp/includes/edit.inc.php and certain other files...

CVE-2011-3717: Exposure of Sensitive Information to an Unauthorized Actor

ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/signupcaptcha/signupcaptcha.php and certain other files...

CVE-2011-3750: Exposure of Sensitive Information to an Unauthorized Actor

kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by getid3/getid3/write.id3v1.php and certain other files...

CVE-2011-3729: Exposure of Sensitive Information to an Unauthorized Actor

dotproject 2.1.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by style/dp-grey-theme/footer.php and certain other files...

CVE-2011-3720: Exposure of Sensitive Information to an Unauthorized Actor

conceptcms 5.3.1, 5.3.3, and possibly other versions allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by syslibs/umlib/umauthserver.inc.php and certain other files...

CVE-2011-3714: Exposure of Sensitive Information to an Unauthorized Actor

ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php...

CVE-2011-3696: Exposure of Sensitive Information to an Unauthorized Actor

60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by post.php and certain other files...

PT-2011-4604

Name of the Vulnerable Software and Affected Versions ClanSphere version 2010.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing the file, which reveals the installation path in an error message. For...

PT-2011-4609

Name of the Vulnerable Software and Affected Versions CodeIgniter version 1.7.2 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, this can be...

PT-2011-4641

Name of the Vulnerable Software and Affected Versions LifeType version 1.2.10 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, a request to...

PT-2011-4644

Name of the Vulnerable Software and Affected Versions Mambo version 4.6.5 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing certain files, such as includes/sef.php, which reveals the installation path i...

PT-2011-4633

Name of the Vulnerable Software and Affected Versions Hesk version 2.2 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by files such as inc/footer.inc.php, which reveals the installation path in an error...