| Package | Affected versions | Patched versions |
|---|---|---|
| framework | = 1.11.3 | |
| server | = 5.1.0 |
Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free