rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-3732 
eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by _lib/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3733 
Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by vendors/simpletest/test/visual_test.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3734 
Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by core/framework/SimpleBuilder.class.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3735 
Escort Agency CMS (aka escort-agency-cms) allows remote attackers to obtain sensitive information via crafted array parameters in a request to a .php file, which reveals the installation path in an error message, as demonstrated by makethumb.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3736 
ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by upgrades/upgrade9.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3737 
eyeOS 2.2.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by apps/rmail/webmail/program/lib/Net/SMTP.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3738 
Feng Office 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/upgrade/templates/layout.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3739 
Freeway 1.5 Alpha allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/Freeway/boxes/last_product.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3740 
FrontAccounting 2.3.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by reporting/includes/fpdi/fpdi2tcpdf_bridge.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3741 
Ganglia 3.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by host_view.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3742 
HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3743 
Hesk 2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/footer.inc.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3744 
HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/PHPT/Reporter/SimpleTest.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3745 
HycusCMS 1.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/hycus_template/template.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3746 
Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/page.tpl.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3747 
Joomla! 1.6.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by libraries/phpmailer/language/phpmailer.lang-joomla.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3748 
Kamads Classifieds 2_B3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by V2A_XHTML/style/view.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3749 
ka-Map 1.0-20070205 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by test.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3750 
kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by getid3/getid3/write.id3v1.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3751 
LifeType 1.2.10 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/badbehavior/pluginbadbehavior.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3752 
LimeSurvey 1.90+ build9642-20101214 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/statistics.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3753 
LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by viewer.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3754 
Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/sef.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3755 
MantisBT 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by view_all_inc.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3756 
MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3757 
Moodle 2.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by webservice/xmlrpc/locallib.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3758 
::mound:: 2.1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/smarty/libs/sysplugins/smarty_internal_template.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3759 
MyBB (aka MyBulletinBoard) 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/3rdparty/diff/Diff/ThreeWay.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-23T23:00:00.000Z
CVE-2011-3760 
Nucleus 3.61 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/api_nucleus.inc.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3761 
NuSOAP 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by nuSOAP/classes/class.wsdl.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3762 
OpenBlog 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3763 
OpenCart 1.4.9.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/startup.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3764 
OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by User_Perms_class.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3765 
Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/versions/upgrade_115.inc.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3766 
OrangeHRM 2.6.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/orange/menu/Menu.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3767 
osCommerce 3.0a5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by redirect.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3768 
Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3769 
PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ads.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3770 
phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Flowing_Dark/parameters.tpl.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3771 
phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by doc/update_smilies_1.50-1.60.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3772 
phpCollab 2.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by topics/noti_newtopic.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3773 
PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3774 
php Easy Survey Package (phpESP) 2.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/landing.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3775 
PHPfileNavigator 2.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xestion/varios/logs.inc.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3776 
phpFormGenerator 2.09 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by forms/process.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3777 
phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/zilveer/style.css.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3778 
PhpGedView 4.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by serviceClientTest.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3779 
PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/create_acct.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3780 
PHP iCalendar 2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by rss/rss_common.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3781 
PHPIDS 0.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/IDS/VersionTest.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3782 
phpLD 2-151.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by libs/smarty/Smarty_Compiler.class.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3783 
phpMyFAQ 2.6.13 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lang/language_uk.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3784 
Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Odyssey/theme.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3785 
PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3786 
PHProjekt 6.0.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Setup/Controllers/IndexController.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3787 
phpScheduleIt 1.2.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/schedule.template.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3788 
PhpSecInfo 0.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Test/Test_Suhosin.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3789 
phpwcms 1.4.7 r412 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by template/inc_script/frontend_render/disabled/majonavi.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3790 
Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3791 
Piwik 1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Widgetize/Widgetize.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3792 
Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functions_feeds.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3793 
Pixie 1.04 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/modules/static.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3794 
Pligg CMS 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/init.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3795 
Podcast Generator 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by core/themes.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3796 
PrestaShop 1.4.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by product-sort.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3797 
ProjectPier 0.8.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/upgrade/templates/layout.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z
CVE-2011-3798 
Rapid Leech 2.3-v42-svn322 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by classes/pear.php and certain other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-24T00:00:00.000Z