2006-11-26 22:00:00
mitre
PUBLISHED
mmgallery 1.55 allows remote attackers to obtain sensitive information via a direct request for thumbs.php, which reveals the installation path in various error messages.