CVE-2011-3706

ATutor 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by users/toolsettings.inc.php and certain other files...

CVE-2011-3706

CVE-2011-3706 affects ATutor 2.0. The vulnerability allows remote attackers to obtain sensitive information by directly requesting a PHP file, causing an error message that reveals the installation path (demonstrated by files like users/tool_settings.inc.php and others). The available documents d...