CVE-2011-3738

Name of the Vulnerable Software and Affected Versions Feng Office version 1.7.2

Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as public/upgrade/templates/layout.php, which reveals the installation path in an error message.

Recommendations For Feng Office version 1.7.2, consider restricting access to sensitive .php files, such as public/upgrade/templates/layout.php, to prevent the disclosure of installation paths. As a temporary workaround, limit access to these files until a patch is available.