CVE-2011-3796

Name of the Vulnerable Software and Affected Versions PrestaShop version 1.4.0.6

Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, this can be demonstrated by accessing files such as product-sort.php.

Recommendations For PrestaShop version 1.4.0.6, consider restricting access to sensitive .php files to prevent information disclosure. As a temporary workaround, avoid using files like product-sort.php that may reveal the installation path in error messages until a fix is available.