CVE-2011-3825
CVE-2011-3825
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files.
EPSS 1.5%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
zend-framework Ubuntu:16.04:LTS
- Versions
- 1.11.11-0ubuntu2
- 1.11.11-0ubuntu3
- 1.11.11-0ubuntu3.16.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published