Description
index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message.
References
- singapore-index-path-disclosure(27323) vdb-entry
- 1135 third-party-advisory
- 20060618 singapore gallery <= 0.10.0 Multiple Vulnerabilities mailing-list