Skip to content
OpenAdvisories

Archive

23 September 2011

Vulnerabilities first published on this day (UTC), newest first.

68 results · Feed

  • Unscored —

    Drupal 7.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals t…

  • Unscored —

    appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal…

  • Unscored —

    Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals …

  • Unscored —

    eyeOS 2.2.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal…

  • Unscored —

    Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which…

  • Unscored —

    Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals t…

  • Unscored —

    LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals…

  • Unscored —

    kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which re…

  • Unscored —

    LimeSurvey 1.90+ build9642-20101214 allows remote attackers to obtain sensitive information via a direct request to a .…

  • Unscored —

    60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev…

  • Unscored —

    Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which …

  • Unscored —

    Coppermine Photo Gallery (CPG) 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a…

  • Unscored —

    AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals t…

  • Unscored —

    FrontAccounting 2.3.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, whic…

  • Unscored —

    DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals…

  • Unscored —

    Freeway 1.5 Alpha allows remote attackers to obtain sensitive information via a direct request to a .php file, which re…

  • Unscored —

    Ganglia 3.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal…

  • Unscored —

    MyBB (aka MyBulletinBoard) 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php f…

  • Unscored —

    Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which r…

  • Unscored —

    b2evolution 3.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which re…

  • Medium —

    CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file

    CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files.

  • Unscored —

    Joomla! 1.6.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal…

  • Unscored —

    Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea…

  • Unscored —

    JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct …

  • Unscored —

    ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev…

  • Unscored —

    Advanced Electron Forum (AEF) 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .…

  • Unscored —

    Claroline 1.9.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve…

  • Unscored —

    concrete 5.4.0.5, 5.4.1, and 5.4.1.1 allows remote attackers to obtain sensitive information via a direct request to a …

  • Unscored —

    AlegroCart 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev…

  • Unscored —

    dotproject 2.1.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev…

  • Unscored —

    DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which…

  • Unscored —

    LifeType 1.2.10 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve…

  • Unscored —

    Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal…

  • Unscored —

    CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea…

  • Unscored —

    ClanTiger 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve…

  • Unscored —

    ka-Map 1.0-20070205 allows remote attackers to obtain sensitive information via a direct request to a .php file, which …

  • Unscored —

    Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal…

  • Unscored —

    HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, whic…

  • Unscored —

    Hesk 2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the…

  • Unscored —

    Moodle 2.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals…