Description
Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p parameter, which reveals the path in an error message.
References
- 17668 vdb-entry
- ADV-2006-1490 vdb-entry
- scry-gallery-index-path-disclosure(25990) vdb-entry
- 784 third-party-advisory
- 20060425 Interesting Scry stuff mailing-list
- 20060421 Scry Gallery Directory Traversal & Full Path Disclosure Vulnerabilites mailing-list
- 19777 third-party-advisory
- 24890 vdb-entry