deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-3750
Published: 2011-09-23
Description: kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by getid3/getid3/write.id3v1.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/kplaylist.1.8.502; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3751
Published: 2011-09-23
Description: LifeType 1.2.10 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/badbehavior/pluginbadbehavior.class.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/lifetype-1.2.10; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3752
Published: 2011-09-23
Description: LimeSurvey 1.90+ build9[PII_REDACTED]4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/statistics.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/limesurvey190plus-build9[PII_REDACTED]4; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3753
Published: 2011-09-23
Description: LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by viewer.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/linpha-1.3.4; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3754
Published: 2011-09-23
Description: Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/sef.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/mambo-4.6.5; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3755
Published: 2011-09-23
Description: MantisBT 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by view_all_inc.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/mantisbt-1.2.4; http://secunia.com/advisories/51199
CVE: CVE-2011-3756
Published: 2011-09-23
Description: MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/MicroBlog_0-9-5; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3757
Published: 2011-09-23
Description: Moodle 2.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by webservice/xmlrpc/locallib.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/moodle-2.0.1; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3758
Published: 2011-09-23
Description: ::mound:: 2.1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/smarty/libs/sysplugins/smarty_internal_template.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/mound-2.1.6; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3759
Published: 2011-09-23
Description: MyBB (aka MyBulletinBoard) 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/3rdparty/diff/Diff/ThreeWay.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/mybb-1.6; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3760
Published: 2011-09-24
Description: Nucleus 3.61 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/api_nucleus.inc.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/nucleus3.61; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3761
Published: 2011-09-24
Description: NuSOAP 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by nuSOAP/classes/class.wsdl.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/NuSOAP; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3762
Published: 2011-09-24
Description: OpenBlog 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/OpenBlog-1.2.1; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3763
Published: 2011-09-24
Description: OpenCart 1.4.9.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/startup.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/opencart_v1.4.9.3; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3764
Published: 2011-09-24
Description: OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by User_Perms_class.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/opendocman-1.2.6-svn-2011-01-21; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3765
Published: 2011-09-24
Description: Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/versions/upgrade_115.inc.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/open-realty-2.5.8; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3766
Published: 2011-09-24
Description: OrangeHRM 2.6.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/orange/menu/Menu.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/orangehrm-2.6.0.2; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3767
Published: 2011-09-24
Description: osCommerce 3.0a5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by redirect.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/oscommerce-3.0a5; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3768
Published: 2011-09-24
Description: Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phorum-5.2.15a; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3769
Published: 2011-09-24
Description: PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ads.inc.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpads-2.0; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3770
Published: 2011-09-24
Description: phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Flowing_Dark/parameters.tpl.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpAlbum_v0.4.1.14.fix06; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3771
Published: 2011-09-24
Description: phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by doc/update_smilies_1.50-1.60.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpBook-2.1.0; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3772
Published: 2011-09-24
Description: phpCollab 2.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by topics/noti_newtopic.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpcollab-2.5; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3773
Published: 2011-09-24
Description: PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHPDevShell-V3.0.0-Beta-4b; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3774
Published: 2011-09-24
Description: php Easy Survey Package (phpESP) 2.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/landing.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHP-Easy-Survey-Package-2.1.1; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3775
Published: 2011-09-24
Description: PHPfileNavigator 2.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xestion/varios/logs.inc.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHPfileNavigator-2.3.3; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3776
Published: 2011-09-24
Description: phpFormGenerator 2.09 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by forms/process.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpFormGen-2.09; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3777
Published: 2011-09-24
Description: phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/zilveer/style.css.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpfreechat-1.3; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3778
Published: 2011-09-24
Description: PhpGedView 4.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by serviceClientTest.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PhpGedView-all-4.2.3; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3779
Published: 2011-09-24
Description: PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/create_acct.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PhpHostBot_2.0; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3780
Published: 2011-09-24
Description: PHP iCalendar 2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by rss/rss_common.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpicalendar-2.4; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3781
Published: 2011-09-24
Description: PHPIDS 0.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/IDS/VersionTest.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpids-0.6.5; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3782
Published: 2011-09-24
Description: phpLD 2-151.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by libs/smarty/Smarty_Compiler.class.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpld-2-151.2.0; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3783
Published: 2011-09-24
Description: phpMyFAQ 2.6.13 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lang/language_uk.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpmyfaq-2.6.13; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3784
Published: 2011-09-24
Description: Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Odyssey/theme.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHP-Nuke-8.0; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3785
Published: 2011-09-24
Description: PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHP-Point-Of-Sale-10.7; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3786
Published: 2011-09-24
Description: PHProjekt 6.0.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Setup/Controllers/IndexController.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phprojekt-6.0.5; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3787
Published: 2011-09-24
Description: phpScheduleIt 1.2.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/schedule.template.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpScheduleIt_1.2.12; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3788
Published: 2011-09-24
Description: PhpSecInfo 0.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Test/Test_Suhosin.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PhpSecInfo; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3789
Published: 2011-09-24
Description: phpwcms 1.4.7 r412 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by template/inc_script/frontend_render/disabled/majonavi.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phpwcms-1.4.7r412; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3790
Published: 2011-09-24
Description: Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/piwigo-2.1.5; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3791
Published: 2011-09-24
Description: Piwik 1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Widgetize/Widgetize.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/piwik-1.1; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3792
Published: 2011-09-24
Description: Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functions_feeds.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/pixelpost_v1.7.3; http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE: CVE-2011-3793
Published: 2011-09-24
Description: Pixie 1.04 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/modules/static.php and certain other files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README; http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/pixie_v1.04; http://www.openwall.com/lists/oss-security/2011/06/27/6