5
CVSSv2

CVE-2007-1929

Published: 10/04/2007 Updated: 11/10/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in downloadpic.php in Beryo 2.0, and possibly other versions including 2.4, allows remote malicious users to read arbitrary files via a .. (dot dot) in the chemin parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

gna beryo 2.0

gna beryo 2.4

Exploits

# Beryo 20(downloadpicphp chemin)Remote File Disclosure Vulnerability # DScript: wwwxrousseorg/shared/beryo-20targz # Discovered by: GolD_M = [Mahmood_ali] # Homepage: wwwTryagcc # Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group # VCode: readfile("$chemin"); # Exploit:[Path_Beryo]/downloadpicphp?chemin= ...