Description
Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/BxDolXMLRPCProfileView.php and certain other files.
Remediation
References
Related Vulnerabilities
MySQL CVE-2023-22078 Vulnerability (CVE-2023-22078)
WordPress Plugin Access Expiration Cross-Site Scripting (1.1)
Oracle Database Server CVE-2008-0341 Vulnerability (CVE-2008-0341)
WordPress Plugin Twenty20 Image Before-After Malicious Code (1.6.3)
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-62243)