CVE-2011-3717

Name of the Vulnerable Software and Affected Versions ClipBucket version 2.0.9

Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing certain files, such as plugins/signup captcha/signup captcha.php, which reveals the installation path in an error message.

Recommendations For ClipBucket version 2.0.9, consider restricting access to sensitive .php files, such as plugins/signup captcha/signup captcha.php, to prevent the disclosure of installation paths. As a temporary workaround, limit access to these files until a more permanent solution is available.