CVE-2011-3804

SweetRice 0.7.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugin/tinymce/plugins/advimage/images.php...

Information disclosure

SweetRice 0.7.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugin/tinymce/plugins/advimage/images.php...

CVE-2011-3804

SweetRice 0.7.1 has an information disclosure vulnerability where remote attackers can cause an error message to reveal the installation path via a direct request to a PHP file (examples shown in _plugin/tiny_mce/plugins/advimage/images.php). The issue is documented across multiple sources (NVD, ...