deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-3707
Published: 2011-09-23
Description: JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Auth/Yadis/Yadis.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/auth; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3708
Published: 2011-09-23
Description: Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/page-redirect-info.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/automne4-v4_0_2-install; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3709
Published: 2011-09-23
Description: b2evolution 3.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by locales/ru_RU/ru-RU.locale.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/b2evolution-3.3.3; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3710
Published: 2011-09-23
Description: bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by bb-templates/kakumei/view.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/bbpress-1.0.2; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3711
Published: 2011-09-23
Description: BIGACE 2.7.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/libs/javascript.inc.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/bigace_2.7.5; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3712
Published: 2011-09-23
Description: CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/cakephp-1.3.7; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3713
Published: 2011-09-23
Description: cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/session_check.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/cftp-r80; http://packetstormsecurity.com/files/129666
CVE: CVE-2011-3714
Published: 2011-09-23
Description: ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/clansphere_2010.0; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3715
Published: 2011-09-23
Description: ClanTiger 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/statistics.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/clantiger1.1.3; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3716
Published: 2011-09-23
Description: Claroline 1.9.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by work/connector/linker.cnr.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/claroline-1.9.7; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3717
Published: 2011-09-23
Description: ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/signup_captcha/signup_captcha.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/clipbucket_2.0.9_stable_Fr; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3718
Published: 2011-09-23
Description: CMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/TinyMCE/TinyMCE.module.php and certain other files.  NOTE: this might overlap CVE-2007-5444.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/cmsmadesimple-1.9.2; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3719
Published: 2011-09-23
Description: CodeIgniter 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/CodeIgniter_1.7.2; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3720
Published: 2011-09-23
Description: conceptcms 5.3.1, 5.3.3, and possibly other versions allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by sys_libs/umlib/um_authserver.inc.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/conceptcms_inst10_0531_100820; http://secunia.com/advisories/46208
CVE: CVE-2011-3721
Published: 2011-09-23
Description: concrete 5.4.0.5, 5.4.1, and 5.4.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/spellchecker_service.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/concrete5.4.0.5; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3722
Published: 2011-09-23
Description: Coppermine Photo Gallery (CPG) 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/CopperminePhotoGallery-1.5.12; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3723
Published: 2011-09-23
Description: Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by README_FILES/livehelp.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/craftysyntax3.0.2; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3724
Published: 2011-09-23
Description: CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/shipping/USPS/calc.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/CubeCart-4.4.3; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3725
Published: 2011-09-23
Description: DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by header_html.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/deluxebb-1.3; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3726
Published: 2011-09-23
Description: DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by views/dummy/show.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/DoceboLMS_4.0.4; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3727
Published: 2011-09-23
Description: DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/tpl/index.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/dokuwiki-2009-12-25c; http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090755.html
CVE: CVE-2011-3728
Published: 2011-09-23
Description: Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/BxDolXMLRPCProfileView.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/Dolphin-7.0.4; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3729
Published: 2011-09-23
Description: dotproject 2.1.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by style/dp-grey-theme/footer.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/dotproject-2.1.4; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3730
Published: 2011-09-23
Description: Drupal 7.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/simpletest/tests/upgrade/drupal-6.upload.database.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/drupal-7.0; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3731
Published: 2011-09-23
Description: e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by e107_plugins/pdf/e107pdf.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/e107_0.7.24; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3732
Published: 2011-09-23
Description: eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by _lib/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/eggblog_4.1.2; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3733
Published: 2011-09-23
Description: Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by vendors/simpletest/test/visual_test.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/elgg-1.7.6; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3734
Published: 2011-09-23
Description: Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by core/framework/SimpleBuilder.class.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/energine-2.3.8; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3735
Published: 2011-09-23
Description: Escort Agency CMS (aka escort-agency-cms) allows remote attackers to obtain sensitive information via crafted array parameters in a request to a .php file, which reveals the installation path in an error message, as demonstrated by makethumb.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/escort-agency-cms; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3736
Published: 2011-09-23
Description: ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by upgrades/upgrade9.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/ExoPHPDesk_1.2.1; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3737
Published: 2011-09-23
Description: eyeOS 2.2.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by apps/rmail/webmail/program/lib/Net/SMTP.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/eyeOS-2.2.0.0; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3738
Published: 2011-09-23
Description: Feng Office 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/upgrade/templates/layout.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/fengoffice_1.7.2; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3739
Published: 2011-09-23
Description: Freeway 1.5 Alpha allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/Freeway/boxes/last_product.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/freeway_1_5_alpha_Burstow; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3740
Published: 2011-09-23
Description: FrontAccounting 2.3.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by reporting/includes/fpdi/fpdi2tcpdf_bridge.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/frontaccounting-2.3.1; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3741
Published: 2011-09-23
Description: Ganglia 3.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by host_view.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/ganglia-3.1.7; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3742
Published: 2011-09-23
Description: HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/helpcenterlive-2.1.7; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3743
Published: 2011-09-23
Description: Hesk 2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/footer.inc.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/hesk-2.2; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3744
Published: 2011-09-23
Description: HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/PHPT/Reporter/SimpleTest.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/htmlpurifier-4.2.0; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3745
Published: 2011-09-23
Description: HycusCMS 1.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/hycus_template/template.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/hycuscms-1.0.3; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3746
Published: 2011-09-23
Description: Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/page.tpl.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/jcow.4.2.1; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3747
Published: 2011-09-23
Description: Joomla! 1.6.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by libraries/phpmailer/language/phpmailer.lang-joomla.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/joomla-1.6.0; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3748
Published: 2011-09-23
Description: Kamads Classifieds 2_B3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by V2A_XHTML/style/view.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/kamads-2_b3; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3749
Published: 2011-09-23
Description: ka-Map 1.0-20070205 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by test.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/ka-map-1.0-20070205; http://www.openwall.com/lists/oss-security/2011/06/27/6