CVE-2006-2893

CVE-2006-2893

EPSS 1.6%

index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate action.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://secunia.com/advisories/20498 http://securityreason.com/securityalert/1060 https://exchange.xforce.ibmcloud.com/vulnerabilities/26964 http://www.securityfocus.com/archive/1/436125/100/0/threaded http://www.securityfocus.com/bid/18296 http://www.vupen.com/english/advisories/2006/2188