Description

ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/signup_captcha/signup_captcha.php and certain other files.

Remediation

References

CVE-2011-3717

Related Vulnerabilities

WordPress Plugin WP-Table Reloaded Cross-Site Scripting (1.9.3)

MySQL CVE-2015-4807 Vulnerability (CVE-2015-4807)

PHP Numeric Errors Vulnerability (CVE-2014-3587)

OpenSSL Out-of-bounds Write Vulnerability (CVE-2022-2274)

MediaWiki Improper Input Validation Vulnerability (CVE-2017-8814)

Severity

Medium

Classification

CVE-2011-3717 CWE-200

Tags

Missing Update Known Vulnerabilities