PT-2006-3185 · 321Soft · Php-Gallery

Publicado 2006-05-05 · Atualizado 2018-10-18 · CVE-2006-2211

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions 321soft PhP-Gallery version 0.9

Description The issue allows remote attackers to browse arbitrary directories due to an absolute path traversal vulnerability in the index.php file. This is achieved by manipulating the path parameter.

Recommendations For 321soft PhP-Gallery version 0.9, consider restricting access to the path parameter in the index.php file to prevent arbitrary directory browsing until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-2211

Produtos afetados

Php-Gallery

Referências · 8

• 🔥 https://exploit-db.com/exploits/27803 · Exploit
• 🔥 http://securityfocus.com/bid/17812 · Exploit
• 🔥 http://d4igoro.blogspot.com/2006/05/321soft-php-gallery-09-directory.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2211 · Nota de Segurança
• http://securityfocus.com/archive/1/432964/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26231 · Nota
• http://vupen.com/english/advisories/2006/1629 · Nota
• http://secunia.com/advisories/19924 · Nota