CVE-2011-3734

Energine 2.3.8 is affected by an information-disclosure vulnerability where remote attackers can obtain sensitive data by requesting a PHP file directly, causing an error message that reveals the installation path (illustrated by core/framework/SimpleBuilder.class.php and related files). The impa...