CVE-2007-6323

EPSS 8.8%

Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) get_image.php or (2) get_file.php in mms_template/.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4728unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/39148 http://osvdb.org/39149 http://secunia.com/advisories/28075 https://exchange.xforce.ibmcloud.com/vulnerabilities/39014 https://www.exploit-db.com/exploits/4728 http://www.securityfocus.com/bid/26852