Vulnerabilities > CVE-2005-4250 - Directory Traversal vulnerability in Mcgallery PRO 1.0/1.1/2.2

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
mcgallery
exploit available
NVD
Published: 2005-12-14
Updated: 2011-03-08

Summary

Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via the language parameter.

Vulnerable Configurations

Part Description Count
Application
Mcgallery
3

Exploit-Db

descriptionMcGallery 1.0/1.1/2.2 index.php language Parameter Traversal Local File Inclusion. CVE-2005-4250. Webapps exploit for php platform
idEDB-ID:26808
last seen2016-02-03
modified2005-12-13
published2005-12-13
reporterr0t
sourcehttps://www.exploit-db.com/download/26808/
titleMcGallery 1.0/1.1/2.2 index.php language Parameter Traversal Local File Inclusion

References