CVE-2011-3789: Exposure of Sensitive Information to an Unauthorized Actor

phpwcms 1.4.7 r412 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by template/incscript/frontendrender/disabled/majonavi.php and certain other files...

PT-2011-4695

Name of the Vulnerable Software and Affected Versions TaskFreak! version multi-mysql-0.6 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as include/language/zh/register info.php,...

PT-2011-4658

Name of the Vulnerable Software and Affected Versions Phorum version 5.2.15a Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as css.php, which reveals the installation path in an error...

PT-2011-4689

Name of the Vulnerable Software and Affected Versions ReOS version 2.0.5 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as padmin/blocks/vergal.php, which reveals the installation path in...

PT-2011-4702

Name of the Vulnerable Software and Affected Versions Vanilla version 2.0.16 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, requesting...

CVE-2011-3790: Exposure of Sensitive Information to an Unauthorized Actor

Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files...

CVE-2011-3798: Exposure of Sensitive Information to an Unauthorized Actor

Rapid Leech 2.3-v42-svn322 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by classes/pear.php and certain other files...

CVE-2011-3792: Exposure of Sensitive Information to an Unauthorized Actor

Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functionsfeeds.php and certain other files...

CVE-2011-3761: Exposure of Sensitive Information to an Unauthorized Actor

NuSOAP 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by nuSOAP/classes/class.wsdl.php and certain other files...

CVE-2011-3818: Exposure of Sensitive Information to an Unauthorized Actor

WordPress 2.9.2 and 3.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by wp-admin/includes/user.php and certain other files...

CVE-2011-3794: Exposure of Sensitive Information to an Unauthorized Actor

Pligg CMS 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/init.php and certain other files...

CVE-2011-3777: Exposure of Sensitive Information to an Unauthorized Actor

phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/zilveer/style.css.php and certain other files...

CVE-2011-3817: Exposure of Sensitive Information to an Unauthorized Actor

Website Baker 2.8.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/media/parameters.php and certain other files. NOTE: this might overlap CVE-2005-2436...

CVE-2011-3816: Exposure of Sensitive Information to an Unauthorized Actor

WEBinsta mailing list manager 1.3e allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/install3.php and certain other files...

CVE-2011-3768: Exposure of Sensitive Information to an Unauthorized Actor

Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files...

CVE-2011-3774: Exposure of Sensitive Information to an Unauthorized Actor

php Easy Survey Package phpESP 2.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/landing.php and certain other files...

CVE-2011-3787: Exposure of Sensitive Information to an Unauthorized Actor

phpScheduleIt 1.2.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/schedule.template.php and certain other files...

CVE-2011-3805: Exposure of Sensitive Information to an Unauthorized Actor

TaskFreak! multi-mysql-0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/language/zh/registerinfo.php and certain other files...

CVE-2011-3776: Exposure of Sensitive Information to an Unauthorized Actor

phpFormGenerator 2.09 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by forms/process.php...

CVE-2011-3773: Exposure of Sensitive Information to an Unauthorized Actor

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...