Unscored CVE-2002-1801 EUVD-2002-1780GHSA-v66x-wqh5-mwx3

ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a nonexistent image category, which leaks the web …

Published Jun 28, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a nonexistent image category, which leaks the web root in the resulting error message.

References

20020609 [LoWNOISE] ImageFolio Pro 2.2 mailing-list
4976 vdb-entry
magefolio-setup-cgi-access(9308) vdb-entry