CVEs published September 23, 2011
68 CVEs were published on September 23, 2011: 0 critical, 0 high.
- Published
- 68
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 68
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- cakephp/cakephp
- 1
- ezyang/htmlpurifier
- 1
Medium, low and unrated 68
- CVE-2011-3695111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installa
- CVE-2011-369660cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation
- CVE-2011-3697Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa
- CVE-2011-3698AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installat
- CVE-2011-3699John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea
- CVE-2011-3700Advanced Electron Forum (AEF) 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea
- CVE-2011-3701AlegroCart 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation
- CVE-2011-3702Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installati
- CVE-2011-3703AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path
- CVE-2011-3704appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa
- CVE-2011-3705Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installa
- CVE-2011-3706ATutor 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path
- CVE-2011-3707JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php fil
- CVE-2011-3708Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa
- CVE-2011-3709b2evolution 3.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio
- CVE-2011-3710bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa
- CVE-2011-3711BIGACE 2.7.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat
- CVE-2011-3712CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pacakephp/cakephp
- CVE-2011-3713cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in
- CVE-2011-3714ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio
- CVE-2011-3715ClanTiger 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation
- CVE-2011-3716Claroline 1.9.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation
- CVE-2011-3717ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation
- CVE-2011-3718CMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the
- CVE-2011-3719CodeIgniter 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio
- CVE-2011-3720conceptcms 5.3.1, 5.3.3, and possibly other versions allows remote attackers to obtain sensitive information via a direct request to a .php
- CVE-2011-3721concrete 5.4.0.5, 5.4.1, and 5.4.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve
- CVE-2011-3722Coppermine Photo Gallery (CPG) 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev
- CVE-2011-3723Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installat
- CVE-2011-3724CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p
- CVE-2011-3725DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat
- CVE-2011-3726DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation
- CVE-2011-3727DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installa
- CVE-2011-3728Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa
- CVE-2011-3729dotproject 2.1.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation
- CVE-2011-3730Drupal 7.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path
- CVE-2011-3731e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path
- CVE-2011-3732eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa
- CVE-2011-3733Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path
- CVE-2011-3734Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p
- CVE-2011-3735Escort Agency CMS (aka escort-agency-cms) allows remote attackers to obtain sensitive information via crafted array parameters in a request
- CVE-2011-3736ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation
- CVE-2011-3737eyeOS 2.2.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa
- CVE-2011-3738Feng Office 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio
- CVE-2011-3739Freeway 1.5 Alpha allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio
- CVE-2011-3740FrontAccounting 2.3.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the install
- CVE-2011-3741Ganglia 3.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa
- CVE-2011-3742HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the install
- CVE-2011-3743Hesk 2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in
- CVE-2011-3744HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatezyang/htmlpurifier
- CVE-2011-3745HycusCMS 1.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p
- CVE-2011-3746Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path
- CVE-2011-3747Joomla! 1.6.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa
- CVE-2011-3748Kamads Classifieds 2_B3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the insta
- CVE-2011-3749ka-Map 1.0-20070205 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installat
- CVE-2011-3750kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio
- CVE-2011-3751LifeType 1.2.10 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation
- CVE-2011-3752LimeSurvey 1.90+ build9642-20101214 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea
- CVE-2011-3753LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat
- CVE-2011-3754Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path
- CVE-2011-3755MantisBT 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p
- CVE-2011-3756MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation
- CVE-2011-3757Moodle 2.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat
- CVE-2011-3758::mound:: 2.1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation
- CVE-2011-3759MyBB (aka MyBulletinBoard) 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals th
- CVE-2011-2543Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users
- CVE-2011-2544Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authent
- CVE-2011-2766The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during pr