PT-2006-6755 · Mmgallery · Mmgallery

Al7Ejaz Hackerz · Publicado 2006-11-26 · Atualizado 2018-10-17 · CVE-2006-6119

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions mmgallery version 1.55

Description The issue allows remote attackers to obtain sensitive information via a direct request for "thumbs.php", which reveals the installation path in various error messages.

Recommendations For mmgallery version 1.55, consider restricting access to the "thumbs.php" file until a patch is available.

Correção

Identificadores relacionados

CVE-2006-6119

Produtos afetados

Mmgallery

Referências · 5

• http://secunia.com/advisories/23130 · Nota
• http://securityreason.com/securityalert/1917 · Nota
• http://securitytracker.com/id?1017283 · Aviso do Fabricante
• http://securityfocus.com/archive/1/452558/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6119 · Nota de Segurança