CVE-2011-3809

The Hosting Tool (THT) version 1.2.3 is affected. A remote attacker can trigger an information-disclosure via a direct request to a PHP file (e.g., includes/pear/Mail/smtp.php) that reveals the installation path in an error message. This CVE (CVE-2011-3809) is documented with a base score of 5.0 ...