Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3727 State: PUBLISHED Published: 2011-09-23T23:00:00 Last Updated: 2024-08-06T23:46:02.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/tpl/index.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:073 - http://security.gentoo.org/glsa/glsa-201301-07.xml - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://lists.fedoraproject.org/pipermail/package-announce
ml - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090755.html - http://www.securityfocus.com/bid/56328 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/dokuwiki-2009-12-25c - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090938.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090899.html
CVE ID: CVE-2011-3728 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T23:40:58.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/BxDolXMLRPCProfileView.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/Dolphin-7.0.4
CVE ID: CVE-2011-3729 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T03:18:06.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: dotproject 2.1.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by style/dp-grey-theme/footer.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/dotproject-2.1.4 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3730 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T00:45:35.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 7.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/simpletest/tests/upgrade/drupal-6.upload.database.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/drupal-7.0 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vul
ttp://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3731 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T21:08:16.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by e107_plugins/pdf/e107pdf.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/e107_0.7.24
CVE ID: CVE-2011-3732 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T19:15:04.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by _lib/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/eggblog_4.1.2 - http://code.google.com/p/ins
/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/eggblog_4.1.2 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3733 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T21:07:26.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by vendors/simpletest/test/visual_test.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/elgg-1.7.6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3734 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T18:48:57.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by core/framework/SimpleBuilder.class.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/energine-2.3.8
CVE ID: CVE-2011-3735 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T03:28:41.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Escort Agency CMS (aka escort-agency-cms) allows remote attackers to obtain sensitive information via crafted array parameters in a request to a .php file, which reveals the installation path in an error message, as demonstrated by makethumb.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/escort-agency-cms - http://code.google.com/p/inspathx/source/browse/trun
e.com/p/inspathx/source/browse/trunk/paths_vuln/escort-agency-cms - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3736 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T16:53:40.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by upgrades/upgrade9.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/ExoPHPDesk_1.2.1 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3737 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T18:39:02.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: eyeOS 2.2.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by apps/rmail/webmail/program/lib/Net/SMTP.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/eyeOS-2.2.0.0 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3738 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T19:30:28.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Feng Office 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/upgrade/templates/layout.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/fengoffice_1.7.2 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3739 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T01:16:51.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Freeway 1.5 Alpha allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/Freeway/boxes/last_product.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/freeway_1_5_alpha_Burstow - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vu
http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3740 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T00:01:50.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrontAccounting 2.3.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by reporting/includes/fpdi/fpdi2tcpdf_bridge.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/frontaccounting-2.3.1 - http://code.google.com/p/inspathx/source/browse/trunk/pat
nspathx/source/browse/trunk/paths_vuln/frontaccounting-2.3.1 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3741 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T18:08:15.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ganglia 3.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by host_view.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/ganglia-3.1.7 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3742 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T20:47:02.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/helpcenterlive-2.1.7
CVE ID: CVE-2011-3743 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T00:31:28.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hesk 2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/footer.inc.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/hesk-2.2 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3744 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T19:31:10.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/PHPT/Reporter/SimpleTest.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/htmlpurifier-4.2.0 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_READ
openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3745 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T21:57:29.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: HycusCMS 1.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/hycus_template/template.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/hycuscms-1.0.3 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3746 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T20:21:37.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/page.tpl.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/jcow.4.2.1
CVE ID: CVE-2011-3747 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T19:25:28.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.6.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by libraries/phpmailer/language/phpmailer.lang-joomla.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/joomla-1.6.0
CVE ID: CVE-2011-3748 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T00:25:46.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kamads Classifieds 2_B3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by V2A_XHTML/style/view.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/kamads-2_b3 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3749 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T00:02:00.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: ka-Map 1.0-20070205 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by test.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/ka-map-1.0-20070205 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3750 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T22:02:23.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by getid3/getid3/write.id3v1.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/kplaylist.1.8.502 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3751 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T03:59:19.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: LifeType 1.2.10 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/badbehavior/pluginbadbehavior.class.php. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/lifetype-1.2.10 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3752 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T19:52:26.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: LimeSurvey 1.90+ build9642-20101214 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/statistics.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/limesurvey190p
rce/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/limesurvey190plus-build9642-20101214
CVE ID: CVE-2011-3753 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T23:01:23.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by viewer.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/linpha-1.3.4 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3754 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T18:17:52.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/sef.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/mambo-4.6.5
CVE ID: CVE-2011-3755 State: PUBLISHED Published: 2011-09-23T23:00:00 Last Updated: 2024-08-06T23:46:02.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: MantisBT 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by view_all_inc.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/mantisbt-1.2.4 - http://security.gentoo.org/glsa/glsa-201211-01.xml - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://secunia.com/advisories/51199 - http://cod
1211-01.xml - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://secunia.com/advisories/51199 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3756 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T00:02:04.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/MicroBlog_0-9-5 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3757 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T20:53:20.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by webservice/xmlrpc/locallib.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/moodle-2.0.1
CVE ID: CVE-2011-3758 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T23:46:29.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: ::mound:: 2.1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/smarty/libs/sysplugins/smarty_internal_template.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/mound-2.1.6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vul
/p/inspathx/source/browse/trunk/paths_vuln/mound-2.1.6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README