CVE-2011-3731: Infoleak
Published Sep 23, 2011
·Updated
e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by e107plugins/pdf/e107pdf.php and certain other files.
Affected Software
1 affected component
e107 e107=0.7.24
Event History
Sep 23, 2011
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3731?
CVE-2011-3731 has a low severity rating, but it still poses a risk of information disclosure.
2
How do I fix CVE-2011-3731?
To fix CVE-2011-3731, you should upgrade to the latest version of e107 CMS, as it addresses this vulnerability.
3
What type of vulnerability is CVE-2011-3731?
CVE-2011-3731 is a remote information disclosure vulnerability that can expose sensitive information.
4
Which version of e107 CMS is affected by CVE-2011-3731?
Only e107 version 0.7.24 is affected by CVE-2011-3731.
5
How does CVE-2011-3731 affect web application security?
CVE-2011-3731 can lead to unauthorized access to sensitive information, compromising the overall security of web applications running on e107.