CVEブラウザに戻る

CVE-2011-3773

MEDIUM

5.0

CVSS Severity Score

EPSS Score0.1490%

EPSS Percentile3.23th

Published2011年9月24日

Last Modified2026年4月29日

Vulnerability Description

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php.

Affected Platforms (CPE)

📦

Phpdevshell

Phpdevshell

= 3.0.0

References & Advisories

🔗 http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README

🔗 http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHPDevShell-V3.0.0-Beta-4b

🔗 http://www.openwall.com/lists/oss-security/2011/06/27/6

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/70599

🔗 http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README

🔗 http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/PHPDevShell-V3.0.0-Beta-4b

🔗 http://www.openwall.com/lists/oss-security/2011/06/27/6

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/70599

関連する脆弱性情報

CVE-2007-618610.0

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in re...

CVE-2007-61748.5

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOT...

CVE-2011-064710.0

The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x...

CVE-2011-075810.0

The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cau...