CVE-2006-6279 - index.php in @lex Guestbook 4.0.1 allows remote attackers to obtain sensitive information via a skin parameter referencing a nonexistent skin, which reveals the installation path in an error message

Back Back to CVE browser

MEDIUM

index.php in @lex Guestbook 4.0.1 allows remote attackers to obtain sensitive information via a skin parameter referencing a nonexistent skin, which reveals the installation path in an error message

Published Dec 4, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 1.50%

Description

index.php in @lex Guestbook 4.0.1 allows remote attackers to obtain sensitive information via a skin parameter referencing a nonexistent skin, which reveals the installation path in an error message.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://secunia.com/advisories/23181
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1964
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/453123/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/21373
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/4807
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6262
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30638
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/23181		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1964		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/453123/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/21373		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/4807		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6262		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30638		vdb-entryx_refsource_XF