Vulnerability Details CVE-2006-6273
sp_index.php in Simple PHP Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid dir parameter, which reveals the path in an error message.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.2%
CVSS Severity
CVSS v2 Score 7.5
References
- http://securityreason.com/securityalert/1967
- http://www.securityfocus.com/archive/1/452555/100/100/threaded
- http://www.securityfocus.com/archive/1/455359/100/0/threaded
- http://securityreason.com/securityalert/1967
- http://www.securityfocus.com/archive/1/452555/100/100/threaded
- http://www.securityfocus.com/archive/1/455359/100/0/threaded
Products affected by CVE-2006-6273
-
cpe:2.3:a:paul_griffin:simple_php_gallery:1.1