CVE-2011-3784: Infoleak
Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Odyssey/theme.php and certain other files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3784?
CVE-2011-3784 has a medium severity level as it allows remote attackers to obtain sensitive information.
How do I fix CVE-2011-3784?
To fix CVE-2011-3784, upgrade to a later version of PHP-Nuke that does not expose sensitive paths in error messages.
What are the risks associated with CVE-2011-3784?
The risks associated with CVE-2011-3784 include unauthorized access to sensitive information about the PHP-Nuke installation.
What versions of PHP-Nuke are affected by CVE-2011-3784?
CVE-2011-3784 specifically affects PHP-Nuke version 8.0.
Can CVE-2011-3784 be exploited remotely?
Yes, CVE-2011-3784 can be exploited remotely by attackers through direct requests to specific .php files.