Unscored severity · published Dec 4, 2006
CVE-2006-6273
sp_index.php in Simple PHP Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid dir parameter, which reveals the path in an error message
–
CVSS
1.5%
EPSS
No
On KEV
Description
sp_index.php in Simple PHP Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid dir parameter, which reveals the path in an error message.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SP
Simple Php Gallery · Paul Griffin
1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6273
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6273
securityreason.com
http://securityreason.com/securityalert/1967
www.securityfocus.com
http://www.securityfocus.com/archive/1/452555/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/455359/100/0/threaded
More from Simple Php Gallery
–
CVE-2006-6272
Cross-site scripting (XSS) vulnerability in sp_index.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter