CVE-2011-3782: phpLD 2-151.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file...

Security readout for executives and security teams

CVE-2011-3782 is an information disclosure issue in phpLD 2-151.2.0. Certain direct requests to PHP library files can expose the server installation path in an error message. This does not show code execution or data theft by itself, but it can leak environment details useful for later attacks. Exposure is likely limited to internet-facing phpLD 2-151.2.0 deployments where direct access to internal PHP files is possible and production errors disclose filesystem paths. The bundle does not identify other affected products or versions. Handle during normal vulnerability remediation unless phpLD is internet-facing, unsupported, or paired with other weaknesses. The main business risk is environmental disclosure that lowers attacker effort during reconnaissance. Mitigation focus: Check phpLD vendor guidance for a fixed release or supported migration path.; Disable production PHP error display and log errors server-side.; Restrict web access to library and include-only PHP files where supported..

Prepared

Jun 27, 2026, 18:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.