CVE-2010-2334

EPSS 3.2%

Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to read arbitrary files via a .. (dot dot) in the download parameter.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencewww.exploit-db.com/exploits/13856unverified exploitdbwww.exploit-db.com/exploits/13845unverified exploitdbwww.exploit-db.com/exploits/13856unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/65479 http://secunia.com/advisories/40150 http://www.exploit-db.com/exploits/13856 http://www.yamamah.org/home/?page=39