CVE-2011-3770

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/FlowingDark/parameters.tpl.php and certain other files...

CVE-2011-3770

CVE-2011-3770 affects phpAlbum 0.4.1.14 and allows information disclosure via a direct request to certain .php files, revealing the installation path in an error message (notably themes/Flowing_Dark/parameters.tpl.php and other files). The NVD entry documents the vulnerability as a path disclosur...