CVEvulnerability

CVE-2006-3194

6.4 MEDIUM Published 2006-06-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-06-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N

Description

Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) gallery and (2) template parameter.

Affected configurations

• singapore singapore 0.9.1 beta • singapore singapore 0.9.2 beta • singapore singapore 0.9.3 beta • singapore singapore 0.9.4 beta • singapore singapore 0.9.5 beta • singapore singapore 0.9.6 beta • singapore singapore 0.9.7 • singapore singapore 0.9.7 beta • singapore singapore 0.9.8 beta • singapore singapore 0.9.9a beta • singapore singapore 0.9.9b beta • singapore singapore 0.9.10 • singapore singapore 0.9.10 beta • singapore singapore 0.9.11 beta • singapore singapore 0.9 beta • singapore singapore 0.9a beta • singapore singapore 0.10.0

References