CVE-2011-3768: Infoleak
Published Sep 24, 2011
·Updated
Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files.
Affected Software
1 affected component
Phorum Phorum=5.2.15a
Event History
Sep 24, 2011
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3768?
CVE-2011-3768 is classified as a moderate severity vulnerability due to information exposure risks.
2
How do I fix CVE-2011-3768?
Fix CVE-2011-3768 by upgrading to Phorum version 5.2.15b or later.
3
What kind of information does CVE-2011-3768 expose?
CVE-2011-3768 can expose sensitive information including the installation path of the Phorum application.
4
Which versions of Phorum are affected by CVE-2011-3768?
Phorum version 5.2.15a is the specifically affected version by CVE-2011-3768.
5
Are there any workarounds for CVE-2011-3768?
A possible workaround for CVE-2011-3768 is to restrict access to sensitive .php files through server configuration.