Description
OpenCart 1.4.9.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/startup.php and certain other files.
Remediation
References
Related Vulnerabilities
Drupal Improper Authentication Vulnerability (CVE-2010-3091)
WordPress Plugin Simple Gmail Login Stack Trace Information Disclosure (1.1.3)
WordPress Plugin Tagregator Cross-Site Scripting (0.6)
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2020-9481)
Jetty Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-22201)