Vulnerabilities > CVE-2007-1124 - Input Validation vulnerability in Simple One-File Gallery

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
xeroxer
exploit available
NVD
Published: 2007-02-27
Updated: 2018-10-16

Summary

Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.

Vulnerable Configurations

Part Description Count
Application
Xeroxer
1

Exploit-Db

descriptionSimple one-file gallery gallery.php f Parameter Traversal Arbitrary File Access. CVE-2007-1124. Webapps exploit for php platform
idEDB-ID:29642
last seen2016-02-03
modified2007-02-23
published2007-02-23
reporterlaurent gaffie
sourcehttps://www.exploit-db.com/download/29642/
titleSimple one-file gallery gallery.php f Parameter Traversal Arbitrary File Access

References