CVE-2011-3712

CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files...

CVE-2011-3712

CVE-2011-3712 concerns CakePHP 1.3.7, where a vulnerability allows remote attackers to disclose sensitive information by requesting certain .php files, causing error messages that reveal the installation path (e.g., dispatcher.php). The connected documents consistently describe this information d...