Vulnerabilities > CVE-2007-1124 - Unspecified vulnerability in Xeroxer Simple One-File Gallery

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
xeroxer
exploit available
NVD
Published: 2007-02-27
Updated: 2024-11-21

Summary

Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.

Vulnerable Configurations

Part Description Count
Application
Xeroxer
1

Exploit-Db

descriptionSimple one-file gallery gallery.php f Parameter Traversal Arbitrary File Access. CVE-2007-1124. Webapps exploit for php platform
idEDB-ID:29642
last seen2016-02-03
modified2007-02-23
published2007-02-23
reporterlaurent gaffie
sourcehttps://www.exploit-db.com/download/29642/
titleSimple one-file gallery gallery.php f Parameter Traversal Arbitrary File Access

References