Wabbit Gallery Script "dir" Parameter Handling Information Disclosure Vulnerability
Description
A vulnerability has been identified in Wabbit Gallery Script, which could be exploited by attackers to gain knowledge of sensitive information. This flaw is due to an input validation error in the "show_the_gallery()" [script.php] function (called in "index.php") that does not validate the "dir" parameter before being passed to an "opendir()" call, which could be exploited by attackers to determine the existence of arbitrary files or directories.
Vulnerable Products
Vulnerable Software: Wabbit Gallery Script version 0.9 and prior
