Description
CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/shipping/USPS/calc.php and certain other files.
Remediation
References
Related Vulnerabilities
Moodle Improper Privilege Management Vulnerability (CVE-2019-3849)
MySQL Observable Discrepancy Vulnerability (CVE-2019-1559)
WordPress Plugin Watu Quiz Unspecified Vulnerability (2.6)
WordPress Plugin AppPresser-Mobile App Framework Security Bypass (4.3.0)
WordPress Plugin Rate my Post-WP Rating System Multiple Vulnerabilities (3.3.4)