Information Disclosure in OpenDocMan by Open Source Solutions
CVE-2011-3764

Currently unrated

Key Information:

Vendor

Opendocman

Status
Opendocman
Vendor
CVE Published:
24 September 2011

What is CVE-2011-3764?

OpenDocMan 1.2.6-svn-2011-01-21 is susceptible to an information disclosure vulnerability that allows remote attackers to gain sensitive details by directly accessing certain PHP files. This exposure can reveal the installation path and potentially other sensitive information through error messages generated by files like User_Perms_class.php. It's crucial for administrators to mitigate this risk by restricting direct access to such files and implementing appropriate error handling.

References

http://www.openwall.com/lists/oss-security/2011/06/27/6
mailing-listx_refsource_MLIST
http://code.google.com/p/inspathx/source/browse/trunk/pat...
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/70608
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.