CVE-2011-3760

Nucleus 3.61 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/apinucleus.inc.php and certain other files...

CVE-2011-3766

OrangeHRM 2.6.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/orange/menu/Menu.php and certain other files...

CVE-2011-3784

Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Odyssey/theme.php and certain other files...

CVE-2011-3812

Vanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Minify/min/utils.php and certain other files...

CVE-2011-3822

XOOPS 2.5.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/system/xoopsversion.php and certain other files...

CVE-2011-3815

WeBid 1.0.0 is affected by an information-disclosure vulnerability: an unauthorized remote user can trigger an error page from certain PHP files (e.g., js/calendar.php) that reveals the installation path. Affects components handling direct PHP requests; underlying cause is improper error handling...

PT-2011-4660

Name of the Vulnerable Software and Affected Versions phpAlbum version 0.4.1.14 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing certain files, such as themes/Flowing Dark/parameters.tpl.php, which...

CVE-2011-3768

CVE-2011-3768 concerns Phorum 5.2.15a. The vulnerability is an information disclosure where remote attackers can obtain the installation path by making a direct request to a PHP file, with the path exposed in an error message (e.g., via css.php and related files). The connected documents confirm ...

PT-2011-4667

Name of the Vulnerable Software and Affected Versions phpFreeChat version 1.3 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files, which reveals the installation path in an error message. This can be demonstrated by accessing...

PT-2011-4677

Name of the Vulnerable Software and Affected Versions phpScheduleIt version 1.2.12 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by files such as templates/schedule.template.php, which reveals the installati...

CVE-2011-3801

CVE-2011-3801 affects SimpleTest 1.0.1 and allows remote attackers to disclose the installation path by requesting certain PHP files (e.g., test/visual_test.php), causing an error message. Impact is partial confidentiality, with no provided evidence of exploitation details in the connected docume...

PT-2011-4676

Name of the Vulnerable Software and Affected Versions PHProjekt version 6.0.5 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by requesting the file directly, which reveals the installation path in an error messag...

CVE-2011-3787

phpScheduleIt 1.2.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/schedule.template.php and certain other files...

PT-2011-4673

Name of the Vulnerable Software and Affected Versions phpMyFAQ version 2.6.13 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files, which reveals the installation path in an error message. This can be demonstrated by accessing...

PT-2011-4700

Name of the Vulnerable Software and Affected Versions TinyWebGallery TWG version 1.8.3 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing the i frames/i register.php file, which reveals the...

CVE-2011-3825

Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files...

CVE-2011-3793

Pixie 1.04 is affected by an information-disclosure vulnerability where remote attackers can obtain sensitive data by requesting a PHP file directly, causing an error message that reveals the installation path (e.g., admin/modules/static.php). ThisSummary is supported by multiple sources (NVD, Re...

PT-2011-4708

Name of the Vulnerable Software and Affected Versions WordPress versions 2.9.2 through 3.0.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by files such as wp-admin/includes/user.php, which reveals the...

CVE-2011-3794

Pligg CMS 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/init.php and certain other files...

PT-2011-4665

Name of the Vulnerable Software and Affected Versions PHPfileNavigator version 2.3.3 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing files such as xestion/varios/logs.inc.php, which reveals the...