Description
SugarCRM 6.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Sugar5/layout_utils.php and certain other files.
Remediation
References
Related Vulnerabilities
WordPress 2.8.2 Multiple Security Bypass Vulnerabilities (2.0 - 2.8.2)
MySQL CVE-2016-0616 Vulnerability (CVE-2016-0616)
Oracle Database Server CVE-2014-6542 Vulnerability (CVE-2014-6542)
IBM RTC CVE-2015-1971 Vulnerability (CVE-2015-1971)
WordPress Plugin LearnPress-WordPress LMS Cross-Site Request Forgery (3.2.7.2)