Fixed path disclosure through constructor in index.php
Details: http://www.techchattr.com/never-use-opencart