CVE-2011-3771: Infoleak
Published Sep 24, 2011
·Updated
phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by doc/updatesmilies1.50-1.60.php and certain other files.
Affected Software
1 affected component
GNU Phpbook=2.1.0
Event History
Sep 24, 2011
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3771?
CVE-2011-3771 is considered a low severity vulnerability due to its information disclosure nature.
2
How do I fix CVE-2011-3771?
To mitigate CVE-2011-3771, you should upgrade phpBook to the latest version where this vulnerability is patched.
3
What kind of information can be leaked by CVE-2011-3771?
CVE-2011-3771 can leak sensitive information such as the installation path through error messages.
4
Which version of phpBook is affected by CVE-2011-3771?
CVE-2011-3771 specifically affects phpBook version 2.1.0.
5
Can CVE-2011-3771 be exploited remotely?
Yes, CVE-2011-3771 can be exploited remotely by sending direct requests to specific .php files.