CVE-2006-6119 - mmgallery 1.55 allows remote attackers to obtain sensitive information via a direct request for thumbs.php, which reveals the installation path in various error messages

Back Back to CVE browser

MEDIUM

mmgallery 1.55 allows remote attackers to obtain sensitive information via a direct request for thumbs.php, which reveals the installation path in various error messages

Published Nov 26, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 1.33%

Description

mmgallery 1.55 allows remote attackers to obtain sensitive information via a direct request for thumbs.php, which reveals the installation path in various error messages.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://secunia.com/advisories/23130
third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/1917
third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1017283
vdb-entryx_refsource_SECTRACKVendor Advisory
http://www.securityfocus.com/archive/1/452558/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6102
Advisory

Link	Providers	Tags
http://secunia.com/advisories/23130		third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/1917		third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1017283		vdb-entryx_refsource_SECTRACKVendor Advisory
http://www.securityfocus.com/archive/1/452558/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6102		Advisory