Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows remote malicious users to access and delete files by specifying the session in a cookie, which is used in constructing file paths before the session value is sanitized.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
gallery project gallery 2.0 |
||
gallery project gallery 2.0_alpha4 |
||
gallery project gallery 2.0_beta1 |
||
gallery project gallery 2.0_beta2 |
||
gallery project gallery 2.0.1 |
||
gallery project gallery 2.0.2 |
||
gallery project gallery 2.0_beta3 |
||
gallery project gallery 2.0_alpha |
||
gallery project gallery 2.0_alpha1 |
||
gallery project gallery 2.0_alpha2 |
||
gallery project gallery 2.0_alpha3 |