ExoPHPDesk '.php' Files Information Disclosure Vulnerability

ExoPHPDesk is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3736

Affected software: ExoPHPDesk 1.2.1. The vulnerability is an information-disclosure flaw where requesting certain PHP files (e.g., upgrades/upgrade9.php and similar) can leak the installation path via an error message. Root cause is exposure of path information in responses, leading to potential ...