CVE-2007-2643

EPSS 3.7%

Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3901unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://0day.2600.ir/exploits/3901 http://osvdb.org/36016 http://secunia.com/advisories/25262 https://exchange.xforce.ibmcloud.com/vulnerabilities/34240 https://www.exploit-db.com/exploits/3901 http://www.securityfocus.com/bid/23943 http://www.vupen.com/english/advisories/2007/1782