PT-2006-3185 · 321Soft · Php-Gallery

Published 2006-05-05 · Updated 2018-10-18 · CVE-2006-2211

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions 321soft PhP-Gallery version 0.9

Description The issue allows remote attackers to browse arbitrary directories due to an absolute path traversal vulnerability in the index.php file. This is achieved by manipulating the path parameter.

Recommendations For 321soft PhP-Gallery version 0.9, consider restricting access to the path parameter in the index.php file to prevent arbitrary directory browsing until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-2211

Affected Products

Php-Gallery

References · 8

• 🔥 https://exploit-db.com/exploits/27803 · Exploit
• 🔥 http://securityfocus.com/bid/17812 · Exploit
• 🔥 http://d4igoro.blogspot.com/2006/05/321soft-php-gallery-09-directory.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2211 · Security Note
• http://securityfocus.com/archive/1/432964/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26231 · Note
• http://vupen.com/english/advisories/2006/1629 · Note
• http://secunia.com/advisories/19924 · Note