CVE-2006-2295

EPSS 3.0%

Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absolute path in the pfad parameter to (1) index.php and (2) galerie.php.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/27839unverified exploitdbwww.exploit-db.com/exploits/27838unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://d4igoro.blogspot.com/2006/05/dynamic-galerie-10-path-traversal-xss.html http://secunia.com/advisories/19995 https://exchange.xforce.ibmcloud.com/vulnerabilities/26322 http://www.securityfocus.com/bid/17896 http://www.vupen.com/english/advisories/2006/1699