9 matches found
CVE-2011-3801
SimpleTest 1.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by test/visualtest.php and certain other files...
CVE-2011-3801
SimpleTest 1.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by test/visualtest.php and certain other files...
Information disclosure
SimpleTest 1.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by test/visualtest.php and certain other files...
CVE-2011-3801
CVE-2011-3801 affects SimpleTest 1.0.1 and allows remote attackers to disclose the installation path by requesting certain PHP files (e.g., test/visual_test.php), causing an error message. Impact is partial confidentiality, with no provided evidence of exploitation details in the connected docume...
PT-2011-4691
Name of the Vulnerable Software and Affected Versions SimpleTest version 1.0.1 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, this can be...
CVE-2011-3801
SimpleTest 1.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by test/visualtest.php and certain other files...
CVE-2011-3801: Exposure of Sensitive Information to an Unauthorized Actor
SimpleTest 1.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by test/visualtest.php and certain other files...
PT-2011-4620
Name of the Vulnerable Software and Affected Versions Drupal version 7.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by files such as modules/simpletest/tests/upgrade/drupal-6.upload.database.php, which...
CVE-2011-3730: Exposure of Sensitive Information to an Unauthorized Actor
Drupal 7.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/simpletest/tests/upgrade/drupal-6.upload.database.php and certain other files...