Description

OpenCart 1.4.9.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/startup.php and certain other files.

Remediation

References

CVE-2011-3763

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-2007-1862)

WordPress Plugin Comment Rating Cross-Site Request Forgery (2.9.20)

Ruby on Rails 7PK - Security Features Vulnerability (CVE-2015-7576)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-0725)

WordPress Plugin Essential Content Types Security Bypass (1.4)

Severity

Medium

Classification

CVE-2011-3763 CWE-200

Tags

Missing Update Known Vulnerabilities