Security Advisory
CVE-2006-2893
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate action.