Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3759 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T00:55:31.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/3rdparty/diff/Diff/ThreeWay.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/mybb
spathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/mybb-1.6
CVE ID: CVE-2011-3760 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:02.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nucleus 3.61 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/api_nucleus.inc.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/nucleus3.61 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70612 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/s
om/vulnerabilities/70612 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3761 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:02.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: NuSOAP 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by nuSOAP/classes/class.wsdl.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/NuSOAP - https://exchange.xforce.ibmcloud.com/vulnerabilities/70611 - http://code.google.com/p/inspathx/sou
k/paths_vuln/NuSOAP - https://exchange.xforce.ibmcloud.com/vulnerabilities/70611 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3762 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:02.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBlog 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70610 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/OpenBlog-1.2.1 - http://code.google.com/
lities/70610 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/OpenBlog-1.2.1 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3763 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:02.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCart 1.4.9.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/startup.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70609 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source
- http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/opencart_v1.4.9.3
CVE ID: CVE-2011-3764 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:02.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by User_Perms_class.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - https://exchange.xforce.ibmcloud.com/vulnerabilities/70608 - http://code.google.com/
rowse/trunk/paths_vuln/%21_README - https://exchange.xforce.ibmcloud.com/vulnerabilities/70608 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/opendocman-1.2.6-svn-2011-01-21
CVE ID: CVE-2011-3765 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:03.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/versions/upgrade_115.inc.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70607 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/open-realty-2.5.8 - http://code.go
urity/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/open-realty-2.5.8 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3766 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:03.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: OrangeHRM 2.6.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/orange/menu/Menu.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70606 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/orangehrm-2.6.0.2 - http://code.google.com/
ies/70606 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/orangehrm-2.6.0.2 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3767 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:03.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: osCommerce 3.0a5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by redirect.php. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/oscommerce-3.0a5 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70605 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln
://exchange.xforce.ibmcloud.com/vulnerabilities/70605 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3768 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:02.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70604 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk
.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phorum-5.2.15a
CVE ID: CVE-2011-3769 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:03.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ads.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpads-2.0 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - https://exchange.xforce.ibmcloud.com/vulnerabilities/70603
CVE ID: CVE-2011-3770 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:02.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Flowing_Dark/parameters.tpl.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70602 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpAlbum_v0.4.1.14.fix06 - http:
ecurity/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpAlbum_v0.4.1.14.fix06 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3771 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:02.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by doc/update_smilies_1.50-1.60.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70601 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpBook-2.1.0 - http://code.google.com/p/i
11/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpBook-2.1.0 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3772 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-17T02:10:57.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpCollab 2.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by topics/noti_newtopic.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpcollab-2.5 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3773 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:02.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHPDevShell-V3.0.0-Beta-4b - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - https://exchange.xforce.ibmcloud
Beta-4b - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - https://exchange.xforce.ibmcloud.com/vulnerabilities/70599
CVE ID: CVE-2011-3774 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:02.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: php Easy Survey Package (phpESP) 2.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/landing.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70546 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHP-Easy-Survey-Package-2.1.1 -
security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHP-Easy-Survey-Package-2.1.1 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3775 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:03.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPfileNavigator 2.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xestion/varios/logs.inc.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHPfileNavigator-2.3.3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70545 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.g
ange.xforce.ibmcloud.com/vulnerabilities/70545 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3776 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:03.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpFormGenerator 2.09 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by forms/process.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpFormGen-2.09 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70544 - http://code.google.com/p/inspathx/source/browse/trunk/p
9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70544 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3777 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:03.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/zilveer/style.css.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpfreechat-1.3 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70543 - http://code.google.com/p/i
ists/oss-security/2011/06/27/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70543 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3778 State: PUBLISHED Published: 2011-09-24T00:00:00 Last Updated: 2024-08-06T23:46:03.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpGedView 4.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by serviceClientTest.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PhpGedView-all-4.2.3 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70542 - http://code.google.com/p/in
sts/oss-security/2011/06/27/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70542 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3779 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-17T01:21:28.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/create_acct.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PhpHostBot_2.0 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3780 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-17T01:42:06.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP iCalendar 2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by rss/rss_common.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpicalendar-2.4 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3781 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-17T04:03:43.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPIDS 0.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/IDS/VersionTest.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpids-0.6.5 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3782 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-16T17:14:22.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpLD 2-151.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by libs/smarty/Smarty_Compiler.class.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpld-2-151.2.0 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3783 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-16T20:46:39.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyFAQ 2.6.13 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lang/language_uk.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpmyfaq-2.6.13 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3784 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-16T20:02:50.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Odyssey/theme.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHP-Nuke-8.0
CVE ID: CVE-2011-3785 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-17T03:33:07.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHP-Point-Of-Sale-10.7 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_v
CVE ID: CVE-2011-3786 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-17T03:38:58.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHProjekt 6.0.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Setup/Controllers/IndexController.php. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phprojekt-6.0.5 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3787 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-16T17:17:53.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpScheduleIt 1.2.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/schedule.template.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpScheduleIt_1.2.12 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_READ
CVE ID: CVE-2011-3788 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-16T20:12:31.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpSecInfo 0.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Test/Test_Suhosin.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PhpSecInfo - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README