CVE-2005-0375

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-02 · updated 2026-06-16

Description

imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) idalbum and (2) idimage unset, which reveals the installation path in an error message for the sql_fetch_row function.

Affected products

Sergey Kiselev Sgallery: 1.01

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html
http://marc.info/?l=bugtraq&m=110557050700947&w=2
http://securitytracker.com/id?1012868
http://www.waraxe.us/advisory-39.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18877
http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html
http://marc.info/?l=bugtraq&m=110557050700947&w=2
http://securitytracker.com/id?1012868
http://www.waraxe.us/advisory-39.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18877

Get alerted when CVE-2005-0375 or the next vulnerability affects your stack