Published: 10/05/2006 Updated: 20/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote malicious users to access arbitrary files via an absolute path in the pfad parameter to (1) index.php and (2) galerie.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
timobraun dynamic galerie 1.0

source: wwwsecurityfocuscom/bid/17896/info Dynamic Galerie is prone to a directory-traversal vulnerability and a cross-site scripting vulnerability These issues are due to a failure in the application to properly sanitize user-supplied input An attacker can exploit these vulnerabilities to retrieve arbitrary files from the vulnerabl ...

source: wwwsecurityfocuscom/bid/17896/info Dynamic Galerie is prone to a directory-traversal vulnerability and a cross-site scripting vulnerability These issues are due to a failure in the application to properly sanitize user-supplied input An attacker can exploit these vulnerabilities to retrieve arbitrary files from the vulnerable ...

NVD-CWE-Other http://d4igoro.blogspot.com/2006/05/dynamic-galerie-10-path-traversal-xss.html http://www.securityfocus.com/bid/17896 http://secunia.com/advisories/19995 http://www.vupen.com/english/advisories/2006/1699 https://exchange.xforce.ibmcloud.com/vulnerabilities/26322 https://nvd.nist.gov https://www.exploit-db.com/exploits/27839/

CVE-2006-2295

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect