CVE-2011-0774: Exposure of Sensitive Information to an Unauthorized Actor

PivotX before 2.2.2 allows remote attackers to obtain sensitive information via a direct request to 1 includes/ping.php and 2 includes/spamping.php, which reveals the installation path in an error message...