Vulnerabilities > CVE-2006-7035 - Denial-Of-Service vulnerability in Super Link Exchange Script Super Link Exchange Script 1.0

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
super-link-exchange-script

Summary

Directory traversal vulnerability in make_thumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files via ".." sequences in the imgpath parameter.

Vulnerable Configurations

Part Description Count
Application
Super_Link_Exchange_Script
1