CVE-2011-3754: Infoleak
Published Sep 23, 2011
·Updated
Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/sef.php and certain other files.
Affected Software
1 affected component
Mambo-foundation Mambo=4.6.5
Event History
Sep 23, 2011
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3754?
CVE-2011-3754 is considered a low-severity vulnerability due to its ability to expose sensitive information.
2
How do I fix CVE-2011-3754?
To fix CVE-2011-3754, restrict direct access to sensitive .php files or apply security patches provided by Mambo.
3
What type of vulnerability is CVE-2011-3754?
CVE-2011-3754 is a path disclosure vulnerability that reveals the installation path of Mambo.
4
Which software versions are affected by CVE-2011-3754?
CVE-2011-3754 specifically affects Mambo version 4.6.5.
5
Can CVE-2011-3754 be exploited remotely?
Yes, CVE-2011-3754 can be exploited remotely, allowing attackers to obtain sensitive information without authentication.