Description
index.php in mAlbum 0.3 and earlier allows remote attackers to obtain the installation path via an invalid gal parameter.
References
- 20061120 mAlbum v0.3 Multiple vulnerabilitizzz mailing-list
- malbum-index-path-disclosure(30430) vdb-entry