CVE-2011-3796: Infoleak
PrestaShop 1.4.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by product-sort.php and certain other files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3796?
CVE-2011-3796 is classified as a medium-severity vulnerability due to its potential to expose sensitive installation paths.
How do I fix CVE-2011-3796?
To fix CVE-2011-3796, update your PrestaShop installation to a secure version later than 1.4.0.6 that addresses this vulnerability.
What type of attack does CVE-2011-3796 facilitate?
CVE-2011-3796 allows remote attackers to exploit the vulnerability by making direct requests to certain PHP files to obtain sensitive information.
Which version of PrestaShop is affected by CVE-2011-3796?
CVE-2011-3796 specifically affects PrestaShop version 1.4.0.6.
What consequences can arise from CVE-2011-3796?
CVE-2011-3796 may lead to information disclosure, allowing attackers to gain insight into the server's configuration and paths.