CVE-2011-3793

Name of the Vulnerable Software and Affected Versions Pixie version 1.04

Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files, which reveals the installation path in an error message. This can be demonstrated by accessing files such as admin/modules/static.php.

Recommendations For Pixie version 1.04, consider restricting access to sensitive .php files, such as admin/modules/static.php, to prevent information disclosure until a patch is available.