CVE-2006-2463 — MEDIUM (5.0)

Vulnerability Description

view_album.php in SelectaPix 1.31 and earlier allows remote attackers to obtain the installation path via a certain request, which displays the path in an error message, possibly due to an invalid or missing parameter.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Out Of The Trees Web Design	Selectapix	1.31

References

http://securitytracker.com/id?1016085Exploit
http://securitytracker.com/id?1016085Exploit

FAQ

What is CVE-2006-2463?

CVE-2006-2463 is a vulnerability with a CVSS score of 5.0 (MEDIUM). view_album.php in SelectaPix 1.31 and earlier allows remote attackers to obtain the installation path via a certain request, which displays the path in an error message, possibly due to an invalid or ...

How severe is CVE-2006-2463?

CVE-2006-2463 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2006-2463?

Check the references section above for vendor advisories and patch information. Affected products include: Out Of The Trees Web Design Selectapix.