Описание
index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate action.
index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate action.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2006-2893
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26964
- http://secunia.com/advisories/20498
- http://securityreason.com/securityalert/1060
- http://www.securityfocus.com/archive/1/436125/100/0/threaded
- http://www.securityfocus.com/bid/18296
- http://www.vupen.com/english/advisories/2006/2188
EPSS
Процентиль: 70%
0.00622
Низкий
CVE ID
Связанные уязвимости
nvd
больше 19 лет назад
index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate action.
EPSS
Процентиль: 70%
0.00622
Низкий