Description
The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.
References
- 15614 vdb-entry
- 20051130 Gallery 2.x Security Advisory mailing-list
- ADV-2005-2681 vdb-entry