Unscored CVE-2006-6248 EUVD-2006-6231GHSA-qr5h-m6gm-8wmc

index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an invalid rep parameter, which reveals the full path …

Published Dec 4, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an invalid rep parameter, which reveals the full path in an error message.

References

gphotos-index-path-disclosure(30390) vdb-entry
20061118 GPhotos 1.5 Multiple vulnerabilities mailing-list
20061120 Re: GPhotos 1.5 Multiple vulnerabilities mailing-list
1951 third-party-advisory