Vulnerabilities > CVE-2006-2398 - Unspecified vulnerability in Gphotos 1.4

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
gphotos
exploit available
NVD
Published: 2006-05-16
Updated: 2024-11-21

Summary

Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the rep parameter.

Vulnerable Configurations

Part Description Count
Application
Gphotos
2

Exploit-Db

descriptionGphotos 1.4/1.5 index.php rep Variable Traversal Arbitrary Directory Listing. CVE-2006-2398. Webapps exploit for php platform
idEDB-ID:27867
last seen2016-02-03
modified2006-05-13
published2006-05-13
reporterMorocco Security Team
sourcehttps://www.exploit-db.com/download/27867/
titleGphotos 1.4/1.5 index.php rep Variable Traversal Arbitrary Directory Listing

References