Description
CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/shipping/USPS/calc.php and certain other files.
Remediation
References
Related Vulnerabilities
WordPress Plugin Widget Control Powered By Everyblock Cross-Site Scripting (1.0.1)
Oracle Database Server CVE-2007-5505 Vulnerability (CVE-2007-5505)
Joomla! Core 1.5.x Security Bypass (1.5.0 - 1.5.6)
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1599)
YOURLS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3824)