# CVEs published 2011-09-24 67 CVEs were published on September 24, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-3760](https://cve.now/CVE-2011-3760.md): Nucleus 3.61 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat (no CVSS) - [CVE-2011-3761](https://cve.now/CVE-2011-3761.md): NuSOAP 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat (no CVSS) - [CVE-2011-3762](https://cve.now/CVE-2011-3762.md): OpenBlog 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p (no CVSS) - [CVE-2011-3763](https://cve.now/CVE-2011-3763.md): OpenCart 1.4.9.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3764](https://cve.now/CVE-2011-3764.md): OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals t (no CVSS) - [CVE-2011-3765](https://cve.now/CVE-2011-3765.md): Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio (no CVSS) - [CVE-2011-3766](https://cve.now/CVE-2011-3766.md): OrangeHRM 2.6.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio (no CVSS) - [CVE-2011-3767](https://cve.now/CVE-2011-3767.md): osCommerce 3.0a5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3768](https://cve.now/CVE-2011-3768.md): Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p (no CVSS) - [CVE-2011-3769](https://cve.now/CVE-2011-3769.md): PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS) - [CVE-2011-3770](https://cve.now/CVE-2011-3770.md): phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio (no CVSS) - [CVE-2011-3771](https://cve.now/CVE-2011-3771.md): phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa (no CVSS) - [CVE-2011-3772](https://cve.now/CVE-2011-3772.md): phpCollab 2.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa (no CVSS) - [CVE-2011-3773](https://cve.now/CVE-2011-3773.md): PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the ins (no CVSS) - [CVE-2011-3774](https://cve.now/CVE-2011-3774.md): php Easy Survey Package (phpESP) 2.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which re (no CVSS) - [CVE-2011-3775](https://cve.now/CVE-2011-3775.md): PHPfileNavigator 2.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the instal (no CVSS) - [CVE-2011-3776](https://cve.now/CVE-2011-3776.md): phpFormGenerator 2.09 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the install (no CVSS) - [CVE-2011-3777](https://cve.now/CVE-2011-3777.md): phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3778](https://cve.now/CVE-2011-3778.md): PhpGedView 4.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3779](https://cve.now/CVE-2011-3779.md): PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p (no CVSS) - [CVE-2011-3780](https://cve.now/CVE-2011-3780.md): PHP iCalendar 2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio (no CVSS) - [CVE-2011-3781](https://cve.now/CVE-2011-3781.md): PHPIDS 0.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat (no CVSS) - [CVE-2011-3782](https://cve.now/CVE-2011-3782.md): phpLD 2-151.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3783](https://cve.now/CVE-2011-3783.md): phpMyFAQ 2.6.13 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3784](https://cve.now/CVE-2011-3784.md): Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the (no CVSS) - [CVE-2011-3785](https://cve.now/CVE-2011-3785.md): PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the (no CVSS) - [CVE-2011-3786](https://cve.now/CVE-2011-3786.md): PHProjekt 6.0.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3787](https://cve.now/CVE-2011-3787.md): phpScheduleIt 1.2.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installa (no CVSS) - [CVE-2011-3788](https://cve.now/CVE-2011-3788.md): PhpSecInfo 0.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3789](https://cve.now/CVE-2011-3789.md): phpwcms 1.4.7 r412 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installati (no CVSS) - [CVE-2011-3790](https://cve.now/CVE-2011-3790.md): Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat (no CVSS) - [CVE-2011-3791](https://cve.now/CVE-2011-3791.md): Piwik 1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path i (no CVSS) - [CVE-2011-3792](https://cve.now/CVE-2011-3792.md): Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3793](https://cve.now/CVE-2011-3793.md): Pixie 1.04 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS) - [CVE-2011-3794](https://cve.now/CVE-2011-3794.md): Pligg CMS 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3795](https://cve.now/CVE-2011-3795.md): Podcast Generator 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the install (no CVSS) - [CVE-2011-3796](https://cve.now/CVE-2011-3796.md): PrestaShop 1.4.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installati (no CVSS) - [CVE-2011-3797](https://cve.now/CVE-2011-3797.md): ProjectPier 0.8.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installat (no CVSS) - [CVE-2011-3798](https://cve.now/CVE-2011-3798.md): Rapid Leech 2.3-v42-svn322 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the in (no CVSS) - [CVE-2011-3799](https://cve.now/CVE-2011-3799.md): ReOS 2.0.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS) - [CVE-2011-3800](https://cve.now/CVE-2011-3800.md): Serendipity 1.5.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio (no CVSS) - [CVE-2011-3801](https://cve.now/CVE-2011-3801.md): SimpleTest 1.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3802](https://cve.now/CVE-2011-3802.md): StatusNet 0.9.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3803](https://cve.now/CVE-2011-3803.md): SugarCRM 6.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p (no CVSS) - [CVE-2011-3804](https://cve.now/CVE-2011-3804.md): SweetRice 0.7.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3805](https://cve.now/CVE-2011-3805.md): TaskFreak! multi-mysql-0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the in (no CVSS) - [CVE-2011-3806](https://cve.now/CVE-2011-3806.md): TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3807](https://cve.now/CVE-2011-3807.md): Textpattern 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio (no CVSS) - [CVE-2011-3808](https://cve.now/CVE-2011-3808.md): The Bug Genie 2.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installat (no CVSS) - [CVE-2011-3809](https://cve.now/CVE-2011-3809.md): TheHostingTool (THT) 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the in (no CVSS) - [CVE-2011-3810](https://cve.now/CVE-2011-3810.md): TinyWebGallery (TWG) 1.8.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the in (no CVSS) - [CVE-2011-3811](https://cve.now/CVE-2011-3811.md): TomatoCart 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3812](https://cve.now/CVE-2011-3812.md): Vanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p (no CVSS) - [CVE-2011-3813](https://cve.now/CVE-2011-3813.md): Virtual War (aka VWar) 1.5.0r15 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals t (no CVSS) - [CVE-2011-3814](https://cve.now/CVE-2011-3814.md): WebCalendar 1.2.3, and other versions before 1.2.5, allows remote attackers to obtain sensitive information via a direct request to a .php f (no CVSS) - [CVE-2011-3815](https://cve.now/CVE-2011-3815.md): WeBid 1.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS) - [CVE-2011-3816](https://cve.now/CVE-2011-3816.md): WEBinsta mailing list manager 1.3e allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal (no CVSS) - [CVE-2011-3817](https://cve.now/CVE-2011-3817.md): Website Baker 2.8.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installat (no CVSS) - [CVE-2011-3818](https://cve.now/CVE-2011-3818.md): WordPress 2.9.2 and 3.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the ins (no CVSS) - [CVE-2011-3819](https://cve.now/CVE-2011-3819.md): WoW Server Status 4.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the install (no CVSS) - [CVE-2011-3820](https://cve.now/CVE-2011-3820.md): WSN Software 6.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installati (no CVSS) - [CVE-2011-3821](https://cve.now/CVE-2011-3821.md): xajax 0.6 beta1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation (no CVSS) - [CVE-2011-3822](https://cve.now/CVE-2011-3822.md): XOOPS 2.5.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS) - [CVE-2011-3823](https://cve.now/CVE-2011-3823.md): Yamamah 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path (no CVSS) - [CVE-2011-3824](https://cve.now/CVE-2011-3824.md): Your Own URL Shortener (YOURLS) 1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea (no CVSS) - [CVE-2011-3825](https://cve.now/CVE-2011-3825.md): Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, w (no CVSS) - [CVE-2011-3826](https://cve.now/CVE-2011-3826.md): Zikula 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-09-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.