CVE-2011-3785
PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct...
CVE-2011-3785 is a medium vulnerability (CVSS 5.0) in Phppointofsale Php Point Of Sale, published September 24, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.23%, the 68th percentile. No source names a fixed version.
PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.
Exploit likelihood
What each source reports
NVD Score used
PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.
- Record
CVE-2011-3785- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.
- Record
CVE-2011-3785- Updated
- 2026-11-02
EUVDEUVD-2011-3742 No score
PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.
- Record
EUVD-2011-3742- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q88g-xq27-6vj5 No score
PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct...
PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.
- Record
GHSA-q88g-xq27-6vj5- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |