CVE:CVE-2005-0375
CNNVD:CNNVD-200505-447
SGallery 1.01的imageview.php允许远程攻击者通过带有(1)idalbum和(2)idimage unset的HTTP请求来获取敏感信息，从而在sql_fetch_row函数的出错信息中透露安装路径。
solution:Upgrade sergey_kiselev sgallery to a higher version than 1.01,and avoid the version 1.01