medium5.0
CVE-2002-1801
ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a nonexistent image category, which leaks the web root in the resultin…
Impact
ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a nonexistent image category, which leaks the web root in the resulting error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bizdesign | Imagefolio | Versions 2.23, 2.24, 2.26, 2.27 |