CVE-2011-3766

OrangeHRM 2.6.0.2 is affected by an information-disclosure vulnerability in which a direct request to a .php file reveals the installation path in an error message (demonstrated by themes/orange/menu/Menu.php and other files). This is a server-side disclosure that could aid attackers in reconnais...