CVE-2006-2893

index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate action.

Date published : 2006-06-07

http://www.securityfocus.com/bid/18296

http://www.securityfocus.com/archive/1/436125/100/0/threaded