CVE-2011-3794

Pligg CMS 1.1.3 contains an information-disclosure vulnerability: remote attackers can obtain the installation path by requesting a PHP file directly, with an error message revealing the path (demonstrated by widgets/statistics/init.php and similar files). The affected component is a PHP file pat...