Description

Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/BxDolXMLRPCProfileView.php and certain other files.

Remediation

References

CVE-2011-3728

Related Vulnerabilities

MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-31552)

WordPress Plugin WP Insightly for Contact Form 7 and Ninja Forms Cross-Site Scripting (1.0.7)

Grafana CVE-2022-39201 Vulnerability (CVE-2022-39201)

WordPress Plugin Woocommerce Payment Gateway per Category Cross-Site Scripting (2.0.10)

WordPress Plugin Stop Spammers Security-Block Spam Users, Comments, Forms Cross-Site Scripting (2021.8)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2011-3728