PT-2006-6755 · Mmgallery · Mmgallery

Al7Ejaz Hackerz · Published 2006-11-26 · Updated 2018-10-17 · CVE-2006-6119

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions mmgallery version 1.55

Description The issue allows remote attackers to obtain sensitive information via a direct request for "thumbs.php", which reveals the installation path in various error messages.

Recommendations For mmgallery version 1.55, consider restricting access to the "thumbs.php" file until a patch is available.

Fix

Related Identifiers

CVE-2006-6119

Affected Products

Mmgallery

References · 5

• http://securitytracker.com/id?1017283 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6119 · Security Note
• http://secunia.com/advisories/23130 · Note
• http://securityreason.com/securityalert/1917 · Note
• http://securityfocus.com/archive/1/452558/100/0/threaded · Note