Lucene search
HistoryAug 17, 2005 - 4:00 a.m.
CVE-2005-2604
security
cve-2005-2604
path disclosure
web server
vulnerability
mig 1.4.1
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.02 Low
EPSS
Percentile
88.9%
index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to obtain the web server path via certain currDir and image arguments, which leaks the path in an error message.
Affected configurations
Node
my_image_gallerymy_image_galleryMatch1.4.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| my_image_gallery:my_image_gallery | my image gallery | eq | 1.4.1 |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.02 Low
EPSS
Percentile
88.9%
Related for CVE-2005-2604