Description
index.php in Singapore Gallery allows remote attackers to obtain sensitive information via a request with a non-directory gallery parameter, which reveals the path in an error message.
References
- 20070614 Singapore Gallery fullpath disclosure mailing-list
- 41345 vdb-entry
- singapore-gallery-path-disclosure(34866) vdb-entry