CVE-2011-3764: Infoleak
OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by UserPermsclass.php and certain other files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3764?
CVE-2011-3764 is classified as a medium severity vulnerability.
How does CVE-2011-3764 affect OpenDocMan?
CVE-2011-3764 allows remote attackers to obtain sensitive information by requesting certain .php files.
What files are primarily associated with CVE-2011-3764?
User_Perms_class.php is a notable file related to CVE-2011-3764 that can reveal the installation path.
Is there a patch available for CVE-2011-3764?
There is no official patch for CVE-2011-3764; however, you can mitigate the risk by restricting access to vulnerable files.
What are the potential impacts of exploiting CVE-2011-3764?
Exploiting CVE-2011-3764 can lead to exposure of sensitive information, including the installation directory of OpenDocMan.