Vulnerabilities > CVE-2006-2295 - Input Validation vulnerability in Timobraun Dynamic Galerie 1.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
timobraun
exploit available
NVD
Published: 2006-05-10
Updated: 2017-07-20

Summary

Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absolute path in the pfad parameter to (1) index.php and (2) galerie.php.

Vulnerable Configurations

Part Description Count
Application
Timobraun
1

Exploit-Db

  • descriptiontimobraun Dynamic Galerie 1.0 index.php pfad Variable Arbitrary Directory Listing. CVE-2006-2295 . Webapps exploit for php platform
    idEDB-ID:27838
    last seen2016-02-03
    modified2006-05-08
    published2006-05-08
    reporterd4igoro
    sourcehttps://www.exploit-db.com/download/27838/
    titletimobraun Dynamic Galerie 1.0 index.php pfad Variable Arbitrary Directory Listing
  • descriptiontimobraun Dynamic Galerie 1.0 galerie.php pfad Variable Arbitrary Directory Listing. CVE-2006-2295. Webapps exploit for php platform
    idEDB-ID:27839
    last seen2016-02-03
    modified2006-05-08
    published2006-05-08
    reporterd4igoro
    sourcehttps://www.exploit-db.com/download/27839/
    titletimobraun Dynamic Galerie 1.0 galerie.php pfad Variable Arbitrary Directory Listing

References