CVE-2006-2463 Information disclosure in n/a
Remote attackers can obtain the installation path via error messages in view_album.php, exposing sensitive server information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-2463?
CVE-2006-2463 is a medium-severity vulnerability in n/a, published on 19 May 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
view_album.php in SelectaPix 1.31 and earlier allows remote attackers to obtain the installation path via a certain request, which displays the path in an error message, possibly due to an invalid or missing parameter.
Which versions are affected by CVE-2006-2463?
It affects 1 product.
Products include Out of the Trees Web Design Selectapix.
How do I fix CVE-2006-2463?
No fix has been published for CVE-2006-2463 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-2463 being exploited?
There is no known exploitation of CVE-2006-2463 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-gcr6-f25q-5p9w.