CVE-2011-3804

Name of the Vulnerable Software and Affected Versions SweetRice version 0.7.1

Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing plugin/tiny mce/plugins/advimage/images.php, which reveals the installation path in an error message.

Recommendations For SweetRice version 0.7.1, consider restricting access to sensitive .php files, such as plugin/tiny mce/plugins/advimage/images.php, to prevent information disclosure until a patch is available.