CVE:CVE-2005-2604
CNNVD:CNNVD-200508-164
My Image Gallery (Mig ) 1.4.1的index.php页面允许远程攻击者借助于特定的currDir和图像参数获取web服务器的路径。这使得在错误消息中泄露了路径信息。
solution:Upgrade my_image_gallery my_image_gallery to a higher version than 1.4.1,and avoid the version 1.4.1