CVE-2011-3787: Exposure of Sensitive Information to an Unauthorized Actor

phpScheduleIt 1.2.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/schedule.template.php and certain other files...

CVE-2011-3805: Exposure of Sensitive Information to an Unauthorized Actor

TaskFreak! multi-mysql-0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/language/zh/registerinfo.php and certain other files...

CVE-2011-3776: Exposure of Sensitive Information to an Unauthorized Actor

phpFormGenerator 2.09 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by forms/process.php...

CVE-2011-3773: Exposure of Sensitive Information to an Unauthorized Actor

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...

CVE-2011-3812: Exposure of Sensitive Information to an Unauthorized Actor

Vanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Minify/min/utils.php and certain other files...

CVE-2011-3803: Exposure of Sensitive Information to an Unauthorized Actor

SugarCRM 6.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Sugar5/layoututils.php and certain other files...

CVE-2011-3810: Exposure of Sensitive Information to an Unauthorized Actor

TinyWebGallery TWG 1.8.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by iframes/iregister.php...

CVE-2011-3782: Exposure of Sensitive Information to an Unauthorized Actor

phpLD 2-151.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by libs/smarty/SmartyCompiler.class.php and certain other files...

CVE-2011-3825: Exposure of Sensitive Information to an Unauthorized Actor

Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files...

PT-2011-4707

Name of the Vulnerable Software and Affected Versions Website Baker version 2.8.1 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files, which reveals the installation path in an error message. This can be demonstrated by accessin...

CVE-2011-3796: Exposure of Sensitive Information to an Unauthorized Actor

PrestaShop 1.4.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by product-sort.php and certain other files...

CVE-2011-3762: Exposure of Sensitive Information to an Unauthorized Actor

OpenBlog 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files...

CVE-2011-3822: Exposure of Sensitive Information to an Unauthorized Actor

XOOPS 2.5.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/system/xoopsversion.php and certain other files...

PT-2011-4652

Name of the Vulnerable Software and Affected Versions OpenBlog version 1.2.1 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as "system/scaffolding/views/view.php", which reveals...

CVE-2011-3811: Exposure of Sensitive Information to an Unauthorized Actor

TomatoCart 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/system/offline.php and certain other files...

PT-2011-4641

Name of the Vulnerable Software and Affected Versions LifeType version 1.2.10 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, a request to...

PT-2011-4643

Name of the Vulnerable Software and Affected Versions LinPHA version 1.3.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing certain files, such as "viewer.php", which reveals the installation path in a...

PT-2011-4640

Name of the Vulnerable Software and Affected Versions kPlaylist version 1.8.502 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, requesting...

PT-2011-4604

Name of the Vulnerable Software and Affected Versions ClanSphere version 2010.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing the file, which reveals the installation path in an error message. For...

PT-2011-4595

Name of the Vulnerable Software and Affected Versions Arctic Fox CMS version 0.9.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as acp/includes/edit.inc.php, which reveals the...