CVE-2011-2727 The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive in...

MediumCVSS 4.3 EPSS 1.5%

Published: 2014-12-30 04:00
Updated: 2026-06-17 02:31
Exploit status: No public exploit known

Description

The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.

Affected products

Product	Affected versions	Fixed in
tribiq cms	<= 5.2.7b	No fix listed

References

www.htbridge.com

CVSS v2.0

4.3 Medium

AV:N/AC:M/Au:N/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.53% (percentile 75.2)
CWE: CWE-200

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.