Unscored severity · published Aug 17, 2005
CVE-2005-2604
index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to obtain the web server path via certain currDir and image arguments, which leaks the path in an error message
–
CVSS
1.7%
EPSS
No
On KEV
Description
index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to obtain the web server path via certain currDir and image arguments, which leaks the path in an error message.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MI
MY Image Gallery · MY Image Gallery
1.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2604
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2604
Patch
http://secunia.com/advisories/16405
Exploit
http://secwatch.org/advisories/secwatch/20050813_Mig.txt
Patch
http://sourceforge.net/project/shownotes.php?release_id=349348
Exploit
http://www.osvdb.org/18742
Exploit
http://www.securityfocus.com/bid/14570
www.vupen.com
http://www.vupen.com/english/advisories/2005/1432
More from MY Image Gallery
–
CVE-2005-2603
Cross-site scripting (XSS) vulnerability in index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the (1) currDir or (2)…