CVE-2011-0774: Exposure of Sensitive Information to an Unauthorized Actor

PivotX before 2.2.2 allows remote attackers to obtain sensitive information via a direct request to 1 includes/ping.php and 2 includes/spamping.php, which reveals the installation path in an error message...

PT-2011-2623

Name of the Vulnerable Software and Affected Versions PivotX versions prior to 2.2.2 Description The issue allows remote attackers to obtain sensitive information by making a direct request to API endpoints such as "includes/ping.php" and "includes/spamping.php". This results in the revelation of...