Vulnerabilities > CVE-2006-3194 - Directory Traversal and Cross-Site Scripting vulnerability in Singapore Gallery

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
singapore
exploit available
NVD
Published: 2006-06-23
Updated: 2018-10-18

Summary

Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) gallery and (2) template parameter.

Vulnerable Configurations

Part Description Count
Application
Singapore
17

Exploit-Db

descriptionsingapore 0.9.x/0.10 Multiple Parameter Traversal Arbitrary File Access. CVE-2006-3194. Webapps exploit for php platform
idEDB-ID:28066
last seen2016-02-03
modified2006-06-19
published2006-06-19
reportersimo64
sourcehttps://www.exploit-db.com/download/28066/
titlesingapore 0.9.x/0.10 - Multiple Parameter Traversal Arbitrary File Access

References