2008-06-16 23:00:00
mitre
PUBLISHED
embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address."