Information disclosure in Yamamah

CVE-2010-2336

index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the web document root via the download parameter.

Vulnerability class: Information Disclosure

EPSS: 0.024 (82.0th percentile) — read the EPSS interpretation.

Affected products

  • Yamamah — versions 1.00
  • N/a — versions n/a

Weakness classification (CWE)

References