CVE-2011-3730: Infoleak
Drupal 7.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/simpletest/tests/upgrade/drupal-6.upload.database.php and certain other files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3730?
CVE-2011-3730 has been classified as a moderate severity vulnerability.
How do I fix CVE-2011-3730?
To fix CVE-2011-3730, it is recommended to upgrade to a version of Drupal above 7.0 to avoid sensitive information disclosure.
What type of vulnerability is CVE-2011-3730?
CVE-2011-3730 is an information disclosure vulnerability affecting Drupal 7.0.
Who is affected by CVE-2011-3730?
CVE-2011-3730 affects all installations of Drupal version 7.0 that expose files to direct access.
What can attackers gain from exploiting CVE-2011-3730?
By exploiting CVE-2011-3730, attackers may gain sensitive information, including the installation path of the Drupal application.