CVEvulnerability
CVE-2006-2295
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-05-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absolute path in the pfad parameter to (1) index.php and (2) galerie.php.
Affected configurations
• timobraun dynamic galerie 1.0
References
- http://d4igoro.blogspot.com/2006/05/dynamic-galerie-10-path-traversal-xss.html d4igoro.blogspot.com
- http://secunia.com/advisories/19995 secunia.com
- http://www.securityfocus.com/bid/17896 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1699 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26322 exchange.xforce.ibmcloud.com
- http://d4igoro.blogspot.com/2006/05/dynamic-galerie-10-path-traversal-xss.html d4igoro.blogspot.com
- http://secunia.com/advisories/19995 secunia.com
- http://www.securityfocus.com/bid/17896 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1699 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26322 exchange.xforce.ibmcloud.com