CVE-2006-2186

zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a direct request for the (1) /photos/themes/default/ and (2)…

published May 4, 2006

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a direct request for the (1) /photos/themes/default/ and (2) /photos/themes/testing/ URIs, which reveals the path in an error message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01522 · 74.3th percentile
Published
2006-05-04T10:00Z
EPSS history
Timeline
  • 04 MAY 10:00Z
    zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a direct request for the (1) /photos/themes/default/ and (2)…
    cvelistv5