Description

ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/signup_captcha/signup_captcha.php and certain other files.

Remediation

References

CVE-2011-3717

Related Vulnerabilities

OpenSSL Other Vulnerability (CVE-2015-1790)

WordPress 4.3.x Cross-Site Scripting Vulnerability (4.3 - 4.3.1)

WordPress Plugin WP-ViperGB Cross-Site Scripting (1.3.15)

WordPress Plugin Aviary Image Editor Add-on For Gravity Forms Arbitrary File Upload (3.0)

WordPress Plugin Free counter Cross-Site Scripting (1.1)

Severity

Medium

Classification

CVE-2011-3717 CWE-200

Tags

Missing Update Known Vulnerabilities