Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3693 State: PUBLISHED Published: 2011-09-27T19:00:00Z Last Updated: 2024-09-16T18:50:18.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetSaro Enterprise Messenger Server 2.0 allows local users to discover cleartext server credentials by reading the NetSaro.fdb file. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/NetSaro-Enterprise-Messenger-Vuln-Password.html
CVE ID: CVE-2011-3694 State: PUBLISHED Published: 2011-09-27T19:00:00Z Last Updated: 2024-09-16T19:00:58.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote attackers to read application source code by appending a %00 character to a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/NetSaro-Enterprise-Messenger-Source-Code.html
CVE ID: CVE-2011-3695 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T18:48:56.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: 111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by footer.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/111WebCalendar-1.2.3 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3696 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T23:05:28.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: 60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by post.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/60cycleCMS.2.5.2 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3697 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T02:06:31.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/graph/jpgraph/jpgraph_radar.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/achievo-1.4.5 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3698 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T16:57:43.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/poll_vote.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/AdaptCMS_2.0.2_Beta - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3699 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T18:03:57.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/test-active-record.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/adodb - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3700 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T17:47:48.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advanced Electron Forum (AEF) 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by languages/english/deletetopic_lang.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/aef-1.0.8 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3701 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T16:42:55.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlegroCart 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by common.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/AlegroCart_1.2.3 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3702 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T18:18:11.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/template.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/Ananta_Gazelle1.0 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3703 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T17:07:38.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/menu/index.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/anecms-1.0
CVE ID: CVE-2011-3704 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T18:43:15.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by cron.php. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/appRain-d-0.1.0 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3705 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T18:59:37.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by acp/includes/edit.inc.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/Arctic-Fox-CMS-v0.9.4 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3706 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T04:10:04.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATutor 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by users/tool_settings.inc.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/ATutor-2.0 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3707 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T01:16:02.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Auth/Yadis/Yadis.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/auth - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_RE
p/inspathx/source/browse/trunk/paths_vuln/auth - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3708 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T19:50:42.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/page-redirect-info.php. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/automne4-v4_0_2-install - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3709 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T17:43:06.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: b2evolution 3.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by locales/ru_RU/ru-RU.locale.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/b2evolution-3.3.3 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3710 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T22:09:00.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by bb-templates/kakumei/view.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/bbpress-1.0.2 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3711 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T22:50:39.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: BIGACE 2.7.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/libs/javascript.inc.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/bigace_2.7.5 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3712 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T00:36:34.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/cakephp-1.3.7 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3713 State: PUBLISHED Published: 2011-09-23T23:00:00 Last Updated: 2024-08-06T23:46:02.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/session_check.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/cftp-r80 - http://www.exploit-db.com/exploits/35582 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://packetstormsecurity.com/files/129666 - https://excha
- http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://packetstormsecurity.com/files/129666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99551 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3714 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T04:09:23.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/clansphere_2010.0 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3715 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T00:02:09.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClanTiger 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/statistics.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/clantiger1.1.3 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3716 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T19:56:58.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Claroline 1.9.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by work/connector/linker.cnr.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/claroline-1.9.7 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3717 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T23:30:44.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/signup_captcha/signup_captcha.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/clipbucket_2.0.9_stable_Fr - http://code.google.com/p/inspathx/source/browse/trunk/paths_v
ource/browse/trunk/paths_vuln/clipbucket_2.0.9_stable_Fr - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3718 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T03:18:21.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/TinyMCE/TinyMCE.module.php and certain other files. NOTE: this might overlap CVE-2007-5444. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/cmsmadesimple-1.9.2 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com
/trunk/paths_vuln/cmsmadesimple-1.9.2 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3719 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T02:01:19.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodeIgniter 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/CodeIgniter_1.7.2 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3720 State: PUBLISHED Published: 2011-09-23T23:00:00 Last Updated: 2024-08-06T23:46:02.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: conceptcms 5.3.1, 5.3.3, and possibly other versions allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by sys_libs/umlib/um_authserver.inc.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse
//code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/conceptcms_inst10_0531_100820 - http://secunia.com/advisories/46208
CVE ID: CVE-2011-3721 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T16:18:52.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: concrete 5.4.0.5, 5.4.1, and 5.4.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/spellchecker_service.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/con
nspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/concrete5.4.0.5
CVE ID: CVE-2011-3722 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T23:20:32.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coppermine Photo Gallery (CPG) 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/CopperminePhotoGallery-1.5.12 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths
- http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3723 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T02:36:40.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by README_FILES/livehelp.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/craftysyntax3.0.2 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3724 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-17T03:28:43.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/shipping/USPS/calc.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/CubeCart-4.4.3
CVE ID: CVE-2011-3725 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T16:58:46.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by header_html.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/deluxebb-1.3
CVE ID: CVE-2011-3726 State: PUBLISHED Published: 2011-09-23T23:00:00Z Last Updated: 2024-09-16T17:53:46.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by views/dummy/show.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/DoceboLMS_4.0.4 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README