CVE-2011-3696

60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error…

published September 23, 2011

CVSS
—
EPSS
2%
Percentile
83.0
In the wild
Unconfirmed
What it is

60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by post.php and certain other files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02290 · 83.0th percentile
Published
2011-09-23T23:00Z
EPSS history
Timeline
  • 23 SEP 23:00Z
    60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error…
    cvelistv5