PhpWebGallery 1.7.0 and 1.7.1 allows remote authenticated users with advisor privileges to obtain the real e-mail addresses of other users by editing the user's profile.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
phpwebgallery phpwebgallery 1.7.0 |
||
phpwebgallery phpwebgallery 1.7.1 |