VYPR

CVEs

346,414 total · page 5981 of 6,929

AllCriticalHighKEV
  • CVE-2011-3796Sep 24, 2011
    Prestashop
    Prestashop
    risk 0.00cvss —epss 0.02

    PrestaShop 1.4.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by product-sort.php and certain other files.

  • CVE-2011-3795Sep 24, 2011
    Podcast Generator
    Podcast Generator
    risk 0.00cvss —epss 0.01

    Podcast Generator 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by core/themes.php and certain other files.

  • CVE-2011-3794Sep 24, 2011
    Pligg
    CMS
    risk 0.00cvss —epss 0.01

    Pligg CMS 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/init.php and certain other files.

  • CVE-2011-3793Sep 24, 2011
    Lucidcrew
    Pixie
    risk 0.00cvss —epss 0.02

    Pixie 1.04 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/modules/static.php and certain other files.

  • CVE-2011-3792Sep 24, 2011
    Pixelpost
    Pixelpost
    risk 0.00cvss —epss 0.01

    Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functions_feeds.php and certain other files.

  • CVE-2011-3791Sep 24, 2011
    Piwik
    Piwik
    risk 0.00cvss —epss 0.01

    Piwik 1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Widgetize/Widgetize.php and certain other files.

  • CVE-2011-3790Sep 24, 2011
    Piwigo
    Piwigo
    risk 0.00cvss —epss 0.01

    Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files.

  • CVE-2011-3789Sep 24, 2011
    Phpwcms
    Phpwcms
    risk 0.00cvss —epss 0.01

    phpwcms 1.4.7 r412 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by template/inc_script/frontend_render/disabled/majonavi.php and certain other files.

  • CVE-2011-3788Sep 24, 2011
    Phpsec
    Phpsecinfo
    risk 0.00cvss —epss 0.01

    PhpSecInfo 0.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Test/Test_Suhosin.php and certain other files.

  • CVE-2011-3787Sep 24, 2011
    Phpscheduleit
    phpScheduleIt
    risk 0.00cvss —epss 0.01

    phpScheduleIt 1.2.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/schedule.template.php and certain other files.

  • CVE-2011-3786Sep 24, 2011
    Phprojekt
    Phprojekt
    risk 0.00cvss —epss 0.01

    PHProjekt 6.0.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Setup/Controllers/IndexController.php.

  • CVE-2011-3785Sep 24, 2011
    Phppointofsale
    PHP Point Of Sale
    risk 0.00cvss —epss 0.01

    PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.

  • CVE-2011-3784Sep 24, 2011
    PHP-Nuke
    PHP Nuke
    risk 0.00cvss —epss 0.01

    Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Odyssey/theme.php and certain other files.

  • CVE-2011-3783Sep 24, 2011
    PhpMyAdmin
    Phpmyfaq
    risk 0.00cvss —epss 0.01

    phpMyFAQ 2.6.13 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lang/language_uk.php and certain other files.

  • CVE-2011-3782Sep 24, 2011
    PhpLD
    phpLD
    risk 0.00cvss —epss 0.01

    phpLD 2-151.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by libs/smarty/Smarty_Compiler.class.php and certain other files.

  • CVE-2011-3781Sep 24, 2011
    Phpids
    Phpids
    risk 0.00cvss —epss 0.01

    PHPIDS 0.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/IDS/VersionTest.php and certain other files.

  • CVE-2011-3780Sep 24, 2011
    PHP Icalendar
    Phpicalendar
    risk 0.00cvss —epss 0.01

    PHP iCalendar 2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by rss/rss_common.php and certain other files.

  • CVE-2011-3779Sep 24, 2011
    PhpHostBot
    PhpHostBot
    risk 0.00cvss —epss 0.01

    PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/create_acct.php and certain other files.

  • CVE-2011-3778Sep 24, 2011
    Phpgedview
    Phpgedview
    risk 0.00cvss —epss 0.01

    PhpGedView 4.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by serviceClientTest.php and certain other files.

  • CVE-2011-3777Sep 24, 2011
    Phpfreechat
    Phpfreechat
    risk 0.00cvss —epss 0.01

    phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/zilveer/style.css.php and certain other files.

  • CVE-2011-3776Sep 24, 2011
    PhpFormGenerator
    phpFormGenerator
    risk 0.00cvss —epss 0.01

    phpFormGenerator 2.09 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by forms/process.php.

  • CVE-2011-3775Sep 24, 2011
    PHPfileNavigator
    PHPfileNavigator
    risk 0.00cvss —epss 0.01

    PHPfileNavigator 2.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xestion/varios/logs.inc.php and certain other files.

  • CVE-2011-3774Sep 24, 2011
    PhpESP
    phpESP
    risk 0.00cvss —epss 0.01

    php Easy Survey Package (phpESP) 2.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/landing.php and certain other files.

  • CVE-2011-3773Sep 24, 2011
    Phpdevshell
    Phpdevshell
    risk 0.00cvss —epss 0.01

    PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php.

  • CVE-2011-3772Sep 24, 2011
    PHP Collab
    Phpcollab
    risk 0.00cvss —epss 0.01

    phpCollab 2.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by topics/noti_newtopic.php and certain other files.

  • CVE-2011-3771Sep 24, 2011
    GNU
    Phpbook
    risk 0.00cvss —epss 0.01

    phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by doc/update_smilies_1.50-1.60.php and certain other files.

  • CVE-2011-3770Sep 24, 2011
    Phpalbum
    Phpalbum
    risk 0.00cvss —epss 0.01

    phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Flowing_Dark/parameters.tpl.php and certain other files.

  • CVE-2011-3769Sep 24, 2011
    Blondish
    Phpads
    risk 0.00cvss —epss 0.01

    PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ads.inc.php.

  • CVE-2011-3768Sep 24, 2011
    Phorum
    Phorum
    risk 0.00cvss —epss 0.01

    Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files.

  • CVE-2011-3767Sep 24, 2011
    OsCommerce
    Oscommerce
    risk 0.00cvss —epss 0.01

    osCommerce 3.0a5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by redirect.php.

  • CVE-2011-3766Sep 24, 2011
    Orangehrm
    Orangehrm
    risk 0.00cvss —epss 0.01

    OrangeHRM 2.6.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/orange/menu/Menu.php and certain other files.

  • CVE-2011-3765Sep 24, 2011
    Open Realty
    Open Realty
    risk 0.00cvss —epss 0.01

    Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/versions/upgrade_115.inc.php and certain other files.

  • CVE-2011-3764Sep 24, 2011
    Opendocman
    Opendocman
    risk 0.00cvss —epss 0.01

    OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by User_Perms_class.php and certain other files.

  • CVE-2011-3763Sep 24, 2011
    Opencart
    Opencart
    risk 0.00cvss —epss 0.02

    OpenCart 1.4.9.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/startup.php and certain other files.

  • CVE-2011-3762Sep 24, 2011
    Open Blog
    Openblog
    risk 0.00cvss —epss 0.01

    OpenBlog 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.

  • CVE-2011-3761Sep 24, 2011
    Nusoap
    NuSOAP
    risk 0.00cvss —epss 0.01

    NuSOAP 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by nuSOAP/classes/class.wsdl.php and certain other files.

  • CVE-2011-3760Sep 24, 2011
    Nucleus CMS
    Nucleus CMS
    risk 0.00cvss —epss 0.01

    Nucleus 3.61 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/api_nucleus.inc.php and certain other files.

  • CVE-2011-3759Sep 23, 2011
    MyBB
    Mybb
    risk 0.00cvss —epss 0.01

    MyBB (aka MyBulletinBoard) 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/3rdparty/diff/Diff/ThreeWay.php and certain other files.

  • CVE-2011-3758Sep 23, 2011
    Moundlabs
    \
    risk 0.00cvss —epss 0.01

    ::mound:: 2.1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/smarty/libs/sysplugins/smarty_internal_template.php and certain other files.

  • CVE-2011-3757Sep 23, 2011
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    Moodle 2.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by webservice/xmlrpc/locallib.php and certain other files.

  • CVE-2011-3756Sep 23, 2011
    Microblog
    Microblog
    risk 0.00cvss —epss 0.01

    MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files.

  • CVE-2011-3755Sep 23, 2011
    Mantisbt
    Mantisbt
    risk 0.00cvss —epss 0.01

    MantisBT 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by view_all_inc.php and certain other files.

  • CVE-2011-3754Sep 23, 2011
    Mambo (software)
    Mambo
    risk 0.00cvss —epss 0.01

    Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/sef.php and certain other files.

  • CVE-2011-3753Sep 23, 2011
    Linpha
    Linpha
    risk 0.00cvss —epss 0.01

    LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by viewer.php and certain other files.

  • CVE-2011-3752Sep 23, 2011
    Limesurvey
    Limesurvey
    risk 0.00cvss —epss 0.01

    LimeSurvey 1.90+ build9642-20101214 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/statistics.php and certain other files.

  • CVE-2011-3751Sep 23, 2011
    Lifetype
    Lifetype
    risk 0.00cvss —epss 0.01

    LifeType 1.2.10 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/badbehavior/pluginbadbehavior.class.php.

  • CVE-2011-3750Sep 23, 2011
    Kplaylist
    Kplaylist
    risk 0.00cvss —epss 0.01

    kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by getid3/getid3/write.id3v1.php and certain other files.

  • CVE-2011-3749Sep 23, 2011
    Ka Map
    ka-Map
    risk 0.00cvss —epss 0.01

    ka-Map 1.0-20070205 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by test.php and certain other files.

  • CVE-2011-3748Sep 23, 2011
    Kamads
    Classifieds
    risk 0.00cvss —epss 0.01

    Kamads Classifieds 2_B3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by V2A_XHTML/style/view.php and certain other files.

  • CVE-2011-3747Sep 23, 2011
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Joomla! 1.6.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by libraries/phpmailer/language/phpmailer.lang-joomla.php.