CVE-2006-2186

Affected product: zenphoto 1.0.1 beta and earlier. The vulnerability is an information-disclosure flaw where remote attackers can obtain sensitive data by directly requesting the URIs /photos/themes/default/ or /photos/themes/testing/, causing an error message that reveals the path. Impact is par...