# CVEs published 2011-09-23

68 CVEs were published on September 23, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3695](https://cve.now/CVE-2011-3695.md): 111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installa (no CVSS)
- [CVE-2011-3696](https://cve.now/CVE-2011-3696.md): 60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS)
- [CVE-2011-3697](https://cve.now/CVE-2011-3697.md): Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa (no CVSS)
- [CVE-2011-3698](https://cve.now/CVE-2011-3698.md): AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installat (no CVSS)
- [CVE-2011-3699](https://cve.now/CVE-2011-3699.md): John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea (no CVSS)
- [CVE-2011-3700](https://cve.now/CVE-2011-3700.md): Advanced Electron Forum (AEF) 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea (no CVSS)
- [CVE-2011-3701](https://cve.now/CVE-2011-3701.md): AlegroCart 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS)
- [CVE-2011-3702](https://cve.now/CVE-2011-3702.md): Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installati (no CVSS)
- [CVE-2011-3703](https://cve.now/CVE-2011-3703.md): AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS)
- [CVE-2011-3704](https://cve.now/CVE-2011-3704.md): appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa (no CVSS)
- [CVE-2011-3705](https://cve.now/CVE-2011-3705.md): Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installa (no CVSS)
- [CVE-2011-3706](https://cve.now/CVE-2011-3706.md): ATutor 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS)
- [CVE-2011-3707](https://cve.now/CVE-2011-3707.md): JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php fil (no CVSS)
- [CVE-2011-3708](https://cve.now/CVE-2011-3708.md): Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa (no CVSS)
- [CVE-2011-3709](https://cve.now/CVE-2011-3709.md): b2evolution 3.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio (no CVSS)
- [CVE-2011-3710](https://cve.now/CVE-2011-3710.md): bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa (no CVSS)
- [CVE-2011-3711](https://cve.now/CVE-2011-3711.md): BIGACE 2.7.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat (no CVSS)
- [CVE-2011-3712](https://cve.now/CVE-2011-3712.md): CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa (no CVSS, cakephp/cakephp)
- [CVE-2011-3713](https://cve.now/CVE-2011-3713.md): cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in (no CVSS)
- [CVE-2011-3714](https://cve.now/CVE-2011-3714.md): ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio (no CVSS)
- [CVE-2011-3715](https://cve.now/CVE-2011-3715.md): ClanTiger 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS)
- [CVE-2011-3716](https://cve.now/CVE-2011-3716.md): Claroline 1.9.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS)
- [CVE-2011-3717](https://cve.now/CVE-2011-3717.md): ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS)
- [CVE-2011-3718](https://cve.now/CVE-2011-3718.md): CMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the (no CVSS)
- [CVE-2011-3719](https://cve.now/CVE-2011-3719.md): CodeIgniter 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio (no CVSS)
- [CVE-2011-3720](https://cve.now/CVE-2011-3720.md): conceptcms 5.3.1, 5.3.3, and possibly other versions allows remote attackers to obtain sensitive information via a direct request to a .php (no CVSS)
- [CVE-2011-3721](https://cve.now/CVE-2011-3721.md): concrete 5.4.0.5, 5.4.1, and 5.4.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve (no CVSS)
- [CVE-2011-3722](https://cve.now/CVE-2011-3722.md): Coppermine Photo Gallery (CPG) 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev (no CVSS)
- [CVE-2011-3723](https://cve.now/CVE-2011-3723.md): Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installat (no CVSS)
- [CVE-2011-3724](https://cve.now/CVE-2011-3724.md): CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p (no CVSS)
- [CVE-2011-3725](https://cve.now/CVE-2011-3725.md): DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat (no CVSS)
- [CVE-2011-3726](https://cve.now/CVE-2011-3726.md): DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS)
- [CVE-2011-3727](https://cve.now/CVE-2011-3727.md): DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installa (no CVSS)
- [CVE-2011-3728](https://cve.now/CVE-2011-3728.md): Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa (no CVSS)
- [CVE-2011-3729](https://cve.now/CVE-2011-3729.md): dotproject 2.1.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS)
- [CVE-2011-3730](https://cve.now/CVE-2011-3730.md): Drupal 7.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS)
- [CVE-2011-3731](https://cve.now/CVE-2011-3731.md): e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS)
- [CVE-2011-3732](https://cve.now/CVE-2011-3732.md): eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa (no CVSS)
- [CVE-2011-3733](https://cve.now/CVE-2011-3733.md): Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS)
- [CVE-2011-3734](https://cve.now/CVE-2011-3734.md): Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p (no CVSS)
- [CVE-2011-3735](https://cve.now/CVE-2011-3735.md): Escort Agency CMS (aka escort-agency-cms) allows remote attackers to obtain sensitive information via crafted array parameters in a request (no CVSS)
- [CVE-2011-3736](https://cve.now/CVE-2011-3736.md): ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS)
- [CVE-2011-3737](https://cve.now/CVE-2011-3737.md): eyeOS 2.2.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa (no CVSS)
- [CVE-2011-3738](https://cve.now/CVE-2011-3738.md): Feng Office 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio (no CVSS)
- [CVE-2011-3739](https://cve.now/CVE-2011-3739.md): Freeway 1.5 Alpha allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio (no CVSS)
- [CVE-2011-3740](https://cve.now/CVE-2011-3740.md): FrontAccounting 2.3.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the install (no CVSS)
- [CVE-2011-3741](https://cve.now/CVE-2011-3741.md): Ganglia 3.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa (no CVSS)
- [CVE-2011-3742](https://cve.now/CVE-2011-3742.md): HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the install (no CVSS)
- [CVE-2011-3743](https://cve.now/CVE-2011-3743.md): Hesk 2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in (no CVSS)
- [CVE-2011-3744](https://cve.now/CVE-2011-3744.md): HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installat (no CVSS, ezyang/htmlpurifier)
- [CVE-2011-3745](https://cve.now/CVE-2011-3745.md): HycusCMS 1.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p (no CVSS)
- [CVE-2011-3746](https://cve.now/CVE-2011-3746.md): Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS)
- [CVE-2011-3747](https://cve.now/CVE-2011-3747.md): Joomla! 1.6.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa (no CVSS)
- [CVE-2011-3748](https://cve.now/CVE-2011-3748.md): Kamads Classifieds 2\_B3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the insta (no CVSS)
- [CVE-2011-3749](https://cve.now/CVE-2011-3749.md): ka-Map 1.0-20070205 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installat (no CVSS)
- [CVE-2011-3750](https://cve.now/CVE-2011-3750.md): kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio (no CVSS)
- [CVE-2011-3751](https://cve.now/CVE-2011-3751.md): LifeType 1.2.10 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS)
- [CVE-2011-3752](https://cve.now/CVE-2011-3752.md): LimeSurvey 1.90+ build9642-20101214 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea (no CVSS)
- [CVE-2011-3753](https://cve.now/CVE-2011-3753.md): LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat (no CVSS)
- [CVE-2011-3754](https://cve.now/CVE-2011-3754.md): Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS)
- [CVE-2011-3755](https://cve.now/CVE-2011-3755.md): MantisBT 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p (no CVSS)
- [CVE-2011-3756](https://cve.now/CVE-2011-3756.md): MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS)
- [CVE-2011-3757](https://cve.now/CVE-2011-3757.md): Moodle 2.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat (no CVSS)
- [CVE-2011-3758](https://cve.now/CVE-2011-3758.md): ::mound:: 2.1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS)
- [CVE-2011-3759](https://cve.now/CVE-2011-3759.md): MyBB (aka MyBulletinBoard) 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals th (no CVSS)
- [CVE-2011-2543](https://cve.now/CVE-2011-2543.md): Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users (no CVSS)
- [CVE-2011-2544](https://cve.now/CVE-2011-2544.md): Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authent (no CVSS)
- [CVE-2011-2766](https://cve.now/CVE-2011-2766.md): The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during pr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-09-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.