Description

Serendipity 1.5.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/newspaper/layout.php and certain other files.

Remediation

References

CVE-2011-3800

Related Vulnerabilities

WordPress Plugin wpForo Forum Multiple Vulnerabilities (2.1.7)

WordPress Plugin WordPress File Upload Multiple Unspecified Vulnerabilities (3.10.0)

WordPress Plugin The Easiest WordPress Media Manager-WP Media Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.2)

Drupal Other Vulnerability (CVE-2006-0070)

Squid Other Vulnerability (CVE-2010-2951)

Severity

Medium

Classification

CVE-2011-3800 CWE-200

Tags

Missing Update Known Vulnerabilities