CVE-2011-3783: Infoleak
Published Sep 24, 2011
·Updated
phpMyFAQ 2.6.13 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lang/languageuk.php and certain other files.
Affected Software
1 affected component
PhpMyFaq phpmyfaq=2.6.13
Event History
Sep 24, 2011
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3783?
CVE-2011-3783 is classified as a moderate severity vulnerability due to the exposure of sensitive installation path information.
2
How do I fix CVE-2011-3783?
To fix CVE-2011-3783, it is recommended to upgrade phpMyFAQ to version 2.6.14 or later.
3
What types of attacks can exploit CVE-2011-3783?
CVE-2011-3783 can be exploited by remote attackers to gain information about the installation path of phpMyFAQ.
4
Which versions of phpMyFAQ are affected by CVE-2011-3783?
CVE-2011-3783 specifically affects phpMyFAQ version 2.6.13.
5
Can CVE-2011-3783 lead to further attacks?
Yes, the disclosure of sensitive information in CVE-2011-3783 could potentially aid in further targeted attacks.