AneCMS 1.0 'index.php' Multiple HTML Injection Vulnerabilities

No description provided by source...

CVE-2011-3703

AneCMS 1.0 is affected by an information disclosure vulnerability: remote attackers can cause a PHP file to reveal the installation path in an error message (e.g., via widgets/menu/index.php and related files). This is a direct request/file-path leakage issue, not an authentication bypass or code...