PT-2005-1303 · Gallery · Gallery

Rafel Ivgi + 1 · Publicado 2005-02-06 · Atualizado 2017-07-11 · CVE-2005-0222

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gallery 2.0 Alpha

Description The issue allows remote attackers to gain sensitive information by modifying the g2 subView parameter in the main.php file, which reveals the path in an error message.

Recommendations For Gallery 2.0 Alpha, consider restricting access to the main.php file or avoiding the use of the g2 subView parameter until a fix is available.

Correção

Identificadores relacionados

CVE-2005-0222

Produtos afetados

Gallery

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-0222 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=110608459222364&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18940 · Nota
• http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147 · Nota
• http://theinsider.deep-ice.com/texts/advisory69.txt · Aviso do Fabricante
• http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0222 · Nota