Description
Serendipity 1.5.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/newspaper/layout.php and certain other files.
Remediation
References
Related Vulnerabilities
Joomla Other Vulnerability (CVE-2006-4473)
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.2)
MySQL CVE-2019-2966 Vulnerability (CVE-2019-2966)
WordPress Plugin WP Job Manager Cross-Site Scripting (1.23.7)
WordPress MU 'wp-admin/wpmu-blogs.php' Multiple Cross-Site Scripting Vulnerabilities (1.0 - 2.5.1)