CVE-2011-3815

WeBid 1.0.0 is affected by an information-disclosure vulnerability: an unauthorized remote user can trigger an error page from certain PHP files (e.g., js/calendar.php) that reveals the installation path. Affects components handling direct PHP requests; underlying cause is improper error handling...

CVE-2011-3760

CVE-2011-3760 affects Nucleus CMS 3.61, where remote attackers can trigger a direct request to a PHP file (e.g., xmlrpc/api_nucleus.inc.php) to disclose the installation path via an error message. The NVD and related records confirm this information disclosure vector and name the affected file pa...

CVE-2011-3803

CVE-2011-3803 affects SugarCRM 6.1.0. Remote attackers can read sensitive information by directly requesting certain PHP files (e.g., themes/Sugar5/layout_utils.php), triggering error messages that reveal the installation path. Root cause is information disclosure via error output when accessing ...

CVE-2011-3801

CVE-2011-3801 affects SimpleTest 1.0.1 and allows remote attackers to disclose the installation path by requesting certain PHP files (e.g., test/visual_test.php), causing an error message. Impact is partial confidentiality, with no provided evidence of exploitation details in the connected docume...

CVE-2011-3800

The CVE-2011-3800 entry applies to Serendipity 1.5.5. The vulnerability causes information disclosure: a remote attacker can trigger a direct request to a .php file and receive an error message that reveals the installation path (examples include templates/newspaper/layout.php and related files)....

CVE-2011-3824

The CVE-2011-3824 issue affects Your Own URL Shortener (YOURLS) 1.5, where a direct request to a PHP file can disclose installation path information via an error message (e.g., includes/auth.php and similar files). Root cause: error disclosure leaking path details through PHP error handling. Impa...

CVE-2011-3823

CVE-2011-3823 affects Yamamah 1.0. A vulnerable behavior allows remote attackers to obtain sensitive information by requesting a .php file directly, causing an error message that reveals the installation path (e.g., themes/default/index.php and similar files). The underlying root cause is an info...

CVE-2011-3806

TCExam 11.1.015 is affected by an information-disclosure vulnerability: a remote attacker can trigger an error in a direct request to a PHP file (e.g., public/code/tce_page_footer.php) and obtain the installation path. This is documented across multiple sources (NVD/Red Hat/CVEs) and is described...

CVE-2011-3780

The CVE-2011-3780 entry concerns PHP iCalendar 2.4. It describes an information-disclosure vulnerability where remote attackers can obtain sensitive data by requesting a PHP file directly, causing an error message that reveals the installation path (examples reference rss/rss_common.php and simil...

CVE-2011-3762

OpenBlog 1.2.1 is affected by an information disclosure vulnerability where remote attackers can obtain sensitive data by requesting a PHP file directly; the error message reveals the installation path (e.g., via system/scaffolding/views/view.php). The issue corresponds to a partial confidentiali...

CVE-2011-3763

OpenCart 1.4.9.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/startup.php and certain other files...

CVE-2011-3792

Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functionsfeeds.php and certain other files...

CVE-2011-3797

ProjectPier 0.8.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/upgrade/templates/layout.php and certain other files...

CVE-2011-3801

SimpleTest 1.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by test/visualtest.php and certain other files...

CVE-2011-3823

Yamamah 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/index.php and certain other files...

CVE-2011-3785

PHP Point Of Sale POS 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files...

CVE-2011-3760

Nucleus 3.61 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/apinucleus.inc.php and certain other files...

CVE-2011-3800

Serendipity 1.5.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/newspaper/layout.php and certain other files...

CVE-2011-3798

Mode C: The CVE-2011-3798 entry concerns Rapid Leech 2.3-v42-svn322. The vulnerability allows remote attackers to disclose sensitive information by requesting a specific PHP file directly, causing an error message to reveal the installation path (illustrated by files such as classes/pear.php). Th...

CVE-2011-3795

CVE-2011-3795 affects Podcast Generator 1.3. Remote attackers can obtain sensitive information by directly requesting a PHP file, which leaks the installation path via an error message (as shown in core/themes.php and related files). Public sources (NVD, Red Hat advisories) describe this as an in...