Information Disclosure in TinyWebGallery by TinyWebGallery
CVE-2011-3810
Currently unrated
What is CVE-2011-3810?
TinyWebGallery version 1.8.3 is susceptible to an information disclosure vulnerability that allows remote attackers to access sensitive information. By sending a direct request to specific .php files, attackers can trigger error messages that reveal crucial details about the installation path. For instance, accessing i_frames/i_register.php exposes sensitive path information, which could help attackers in escalating their threat to the system. This highlights the importance of securing web applications against such disclosure vulnerabilities.