5
CVSSv2

CVE-2007-0329

Published: 18/01/2007 Updated: 19/10/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

download.php in Joonas Viljanen JV2 Folder Gallery allows remote malicious users to read sensitive files via a relative pathname in the file parameter, as demonstrated by config/gallerysetup.php. NOTE: this issue might be resultant from a directory traversal vulnerability.

Vulnerable Product Search on Vulmon Subscribe to Product

joonas viljanen jv2 folder gallery

Exploits

/* Script Name :JV2 Folder Gallery Script site :wwwjv2net Discovered by :SaO Exploit Coded by :PeTrO Credits To soulreaver,Kuz3y Compile: Visual C++ or DevC++ */ #include <stdioh> #include <stringh> #include <winsockh> #pragma comment(lib,"ws2_32lib") int main(int argc, char *argv[]) { char gelenveri[ ...