Description
index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate action.
References
- 18296 vdb-entry
- gantty-index-path-disclosure(26964) vdb-entry
- 20060606 GANTTy v1.0.3 mailing-list
- ADV-2006-2188 vdb-entry
- 1060 third-party-advisory
- 20498 third-party-advisory