CVE-2011-3717: Exposure of Sensitive Information to an Unauthorized Actor

ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/signupcaptcha/signupcaptcha.php and certain other files...

CVE-2011-3730: Exposure of Sensitive Information to an Unauthorized Actor

Drupal 7.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/simpletest/tests/upgrade/drupal-6.upload.database.php and certain other files...

CVE-2011-3720: Exposure of Sensitive Information to an Unauthorized Actor

conceptcms 5.3.1, 5.3.3, and possibly other versions allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by syslibs/umlib/umauthserver.inc.php and certain other files...

CVE-2011-3754: Exposure of Sensitive Information to an Unauthorized Actor

Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/sef.php and certain other files...

CVE-2011-3732: Exposure of Sensitive Information to an Unauthorized Actor

eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/fckeditor/editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php and certain other files...

CVE-2011-3714: Exposure of Sensitive Information to an Unauthorized Actor

ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php...

CVE-2011-3750: Exposure of Sensitive Information to an Unauthorized Actor

kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by getid3/getid3/write.id3v1.php and certain other files...

CVE-2011-3696: Exposure of Sensitive Information to an Unauthorized Actor

60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by post.php and certain other files...

CVE-2011-3729: Exposure of Sensitive Information to an Unauthorized Actor

dotproject 2.1.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by style/dp-grey-theme/footer.php and certain other files...

CVE-2011-3707: Exposure of Sensitive Information to an Unauthorized Actor

JanRain PHP OpenID library aka php-openid 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Auth/Yadis/Yadis.php and certain other files...

CVE-2011-3697: Exposure of Sensitive Information to an Unauthorized Actor

Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/graph/jpgraph/jpgraphradar.php and certain other files...

CVE-2011-3695: Exposure of Sensitive Information to an Unauthorized Actor

111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by footer.php and certain other files...

CVE-2011-3705: Exposure of Sensitive Information to an Unauthorized Actor

Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by acp/includes/edit.inc.php and certain other files...

PT-2011-4647

Name of the Vulnerable Software and Affected Versions Moodle version 2.0.1 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, requesting...

PT-2011-4620

Name of the Vulnerable Software and Affected Versions Drupal version 7.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by files such as modules/simpletest/tests/upgrade/drupal-6.upload.database.php, which...

CVE-2011-3711: Exposure of Sensitive Information to an Unauthorized Actor

BIGACE 2.7.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/libs/javascript.inc.php and certain other files...

PT-2011-4644

Name of the Vulnerable Software and Affected Versions Mambo version 4.6.5 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing certain files, such as includes/sef.php, which reveals the installation path i...

PT-2011-4641

Name of the Vulnerable Software and Affected Versions LifeType version 1.2.10 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, a request to...

PT-2011-4609

Name of the Vulnerable Software and Affected Versions CodeIgniter version 1.7.2 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, this can be...

CVE-2011-3498: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...