CVE-2011-0775

PivotX 2.2.2 - Information Exposure via Image Parameter Error Message

Title source: llm
STIX 2.1

Description

pivotx/modules/module_image.php in PivotX 2.2.2 allows remote attackers to obtain sensitive information via a non-existent file in the image parameter, which reveals the installation path in an error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References (4)

Core 4
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43041
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/70675
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/64977

Scores

EPSS 0.0124
EPSS Percentile 65.7%

Details

CWE
CWE-200
Status published
Products (1)
pivotx/pivotx 2.2.2
Published Feb 04, 2011
Tracked Since Feb 18, 2026