EZOnlineGallery Multiple Information Disclosure Vulnerabilities
BID:20763
Info
EZOnlineGallery Multiple Information Disclosure Vulnerabilities
| Bugtraq ID: | 20763 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-7103 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 27 2006 12:00AM |
| Updated: | Jul 06 2016 02:40PM |
| Credit: | Mayhemic Labs discovered these issues. |
| Vulnerable: |
EZOnlineGallery EZOnlineGallery 1.3 |
| Not Vulnerable: | |
Discussion
EZOnlineGallery Multiple Information Disclosure Vulnerabilities
EZOnlineGallery is prone to multiple information-disclosure vulnerabilities.
Exploiting these issues may allow an attacker to deduce sensitive information about the directory structure of a system or to access arbitrary stored image files; other attacks may be possible.
EZOnlineGallery 1.3 and prior versions are vulnerable.
EZOnlineGallery is prone to multiple information-disclosure vulnerabilities.
Exploiting these issues may allow an attacker to deduce sensitive information about the directory structure of a system or to access arbitrary stored image files; other attacks may be possible.
EZOnlineGallery 1.3 and prior versions are vulnerable.
Exploit / POC
EZOnlineGallery Multiple Information Disclosure Vulnerabilities
An attacker can exploit these vulnerabilities via a web client.
An attacker can exploit these vulnerabilities via a web client.
Solution / Fix
EZOnlineGallery Multiple Information Disclosure Vulnerabilities
Solution:
The vendor has released a fix for this issue. Please see the vendor references for more information.
Solution:
The vendor has released a fix for this issue. Please see the vendor references for more information.
References
EZOnlineGallery Multiple Information Disclosure Vulnerabilities
References:
References:
- EZOnlineGallery (EZOnlineGallery)
- ezOnlineGallery Multiple Security Issues (Mayhemic Labs)