CVE-2011-3699
EPSS 0.46%
Description
John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/test-active-record.php and certain other files.
How to fix CVE-2011-3699
No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.
- Debian/libphp-adodb—no fix listed
Is CVE-2011-3699 being exploited?
Low — EPSS is 0.5%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0