CVE-2011-3825
24.09.2011, 00:55
Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files.Enginsight
| Vendor | Product | Version |
|---|---|---|
| zend | framework | 1.11.3 |
| zend | server | 5.1.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| zend-framework |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
| zendframework |
|
Common Weakness Enumeration
References