Red Hat Bugzilla – Bug 741393
CVE-2011-3730 drupal7: installation path disclosure via a direct request to a .php file [epel-5]
Last modified: 2014-10-30 01:23:50 EDT
epel-5 tracking bug for drupal7: see blocks bug list for full details of the security issue(s).
This bug is never intended to be made public, please put any public notes
in the 'blocks' bugs.
[bug automatically created by: add-tracking-bugs]
The general consensus from the discussion of this issue in bug 741389 was that with PHP display_errors turned off (which is set by default) that this is not a security issue.
Per the PHP documentation, "This [display_errors] is a feature to support your development and should never be used on production systems (e.g. systems connected to the internet)."