VulnerabilityModified
CVE-2005-0375
imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) idalbum and (2) idimage unset, which reveals the installation path in an error message for the sql_fetch_row function.
MEDIUM 5.0EPSS 1.55%
Does this matter?
Lower severity and a low EPSS score (1.55%). Track it; it rarely justifies an emergency change on its own.
Description
imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) idalbum and (2) idimage unset, which reveals the installation path in an error message for the sql_fetch_row function.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.55% probability · 74th percentile
- CISA KEV
- Not listed
- Affected
- sergey kiselev/sgallery
- Source
- cve@mitre.org
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html
- http://marc.info/?l=bugtraq&m=110557050700947&w=2
- http://securitytracker.com/id?1012868
- http://www.waraxe.us/advisory-39.htmlExploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18877
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html
- http://marc.info/?l=bugtraq&m=110557050700947&w=2
- http://securitytracker.com/id?1012868
- http://www.waraxe.us/advisory-39.htmlExploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18877
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.