CVE

Id
51690  
CVE No.
CVE-2011-3778  
Status
Candidate  
Description
PhpGedView 4.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by serviceClientTest.php and certain other files.  
Phase
Assigned (20110923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
555634 51690 CVE-2011-3778 MLIST:[oss-security] 20110627 Re: CVE request: Joomla unspecified information disclosure vulnerability  View
555635 51690 CVE-2011-3778 URL:http://www.openwall.com/lists/oss-security/2011/06/27/6  View
555636 51690 CVE-2011-3778 MISC:http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README  View
555637 51690 CVE-2011-3778 MISC:http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PhpGedView-all-4.2.3  View
555638 51690 CVE-2011-3778 XF:phpgedview-serviceclienttest-path-disclosure(70542)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34738 JVNDB-2011-004980 phpMyFAQ における重要な情報を取得される脆弱性 phpMyFAQ には、エラーメッセージ内にインストールパスを表示するため、重要な情報を取得される脆弱性が存在します。 CVE-2011-3783 51690 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004980.html  View