CVE:CVE-2006-2463
CNNVD:CNNVD-200605-347
SelectaPix 1.31及之前版本的view_album.php可以使远程攻击者借助一个可以在出错信息中显示路径的特定请求来获得安装路径。可能因无效或缺失的参数所致。
solution:Upgrade out_of_the_trees_web_design selectapix to a higher version than 1.31,and avoid the version 1.31