CVE-2011-3791

CVE-2011-3791 affects Piwik 1.1 and enables information disclosure through direct requests to PHP files (e.g., plugins/Widgetize/Widgetize.php), revealing installation paths in error messages. Root cause: error output leaks path information. Impact: partial confidentiality loss via remote access;...

CVE-2011-3762

OpenBlog 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files...

CVE-2011-3822

XOOPS 2.5.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/system/xoopsversion.php and certain other files...

CVE-2011-3808

The Bug Genie 2.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/svnintegration/config.inc.php and certain other files...

CVE-2011-3768

Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files...

CVE-2011-3822

CVE-2011-3822 affects XOOPS 2.5.0. The vulnerability is an information disclosure where a direct request to a .php file (e.g., modules/system/xoops_version.php) can reveal the installation path in an error message. The issue is documented across multiple sources (NVD, Red Hat, OpenVAS, etc.) with...

CVE-2011-3815

WeBid 1.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by js/calendar.php and certain other files...

CVE-2011-3806

TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/code/tcepagefooter.php and certain other files...

CVE-2011-3800

The CVE-2011-3800 entry applies to Serendipity 1.5.5. The vulnerability causes information disclosure: a remote attacker can trigger a direct request to a .php file and receive an error message that reveals the installation path (examples include templates/newspaper/layout.php and related files)....

CVE-2011-3823

CVE-2011-3823 affects Yamamah 1.0. A vulnerable behavior allows remote attackers to obtain sensitive information by requesting a .php file directly, causing an error message that reveals the installation path (e.g., themes/default/index.php and similar files). The underlying root cause is an info...

CVE-2011-3762

OpenBlog 1.2.1 is affected by an information disclosure vulnerability where remote attackers can obtain sensitive data by requesting a PHP file directly; the error message reveals the installation path (e.g., via system/scaffolding/views/view.php). The issue corresponds to a partial confidentiali...

CVE-2011-3821

CVE-2011-3821 affects xajax 0.6 beta1. A direct request to a vulnerable PHP file (e.g., xajax_core/plugin_layer/xajaxScriptPlugin.inc.php and related files) may disclose the installation path via an error message. The provided documents confirm the information-disclosure impact but do not describ...

CVE-2011-3765

Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/versions/upgrade115.inc.php and certain other files...

CVE-2011-3824

The CVE-2011-3824 issue affects Your Own URL Shortener (YOURLS) 1.5, where a direct request to a PHP file can disclose installation path information via an error message (e.g., includes/auth.php and similar files). Root cause: error disclosure leaking path details through PHP error handling. Impa...

CVE-2011-3760

CVE-2011-3760 affects Nucleus CMS 3.61, where remote attackers can trigger a direct request to a PHP file (e.g., xmlrpc/api_nucleus.inc.php) to disclose the installation path via an error message. The NVD and related records confirm this information disclosure vector and name the affected file pa...

CVE-2011-3819

The CVE-2011-3819 entry concerns WoW Server Status 4.1, where remote attackers can disclose sensitive information through a direct request to a PHP file, exposing the installation path in error messages (as demonstrated by status.php and related files). The documents do not provide root-cause det...

CVE-2011-3801

CVE-2011-3801 affects SimpleTest 1.0.1 and allows remote attackers to disclose the installation path by requesting certain PHP files (e.g., test/visual_test.php), causing an error message. Impact is partial confidentiality, with no provided evidence of exploitation details in the connected docume...

CVE-2011-3813

Virtual War aka VWar 1.5.0r15 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/language/dutch.inc.php and certain other files...

CVE-2011-3806

TCExam 11.1.015 is affected by an information-disclosure vulnerability: a remote attacker can trigger an error in a direct request to a PHP file (e.g., public/code/tce_page_footer.php) and obtain the installation path. This is documented across multiple sources (NVD/Red Hat/CVEs) and is described...

CVE-2011-3778

PhpGedView 4.2.3 is vulnerable to an information-disclosure flaw where a direct request to certain .php files causes an error message that exposes the installation path. This affects the PHP files referenced in the description (e.g., serviceClientTest.php and similar) and can reveal sensitive pat...