medium6.4
CVE-2005-3251
Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in th…
Impact
Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gallery Project | Gallery | Versions 2.0, 2.0_alpha1, 2.0_alpha2, 2.0_alpha3, 2.0_alpha4, 2.0_beta1 |
References
- NVD record
- CVE.org record
- http://dipper.info/security/20051012/
- http://gallery.menalto.com/gallery_2.0.1_released
- http://secunia.com/advisories/17205
- http://securityreason.com/securityalert/88
- http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.html
- http://dipper.info/security/20051012/
- http://gallery.menalto.com/gallery_2.0.1_released
- http://secunia.com/advisories/17205
- http://securityreason.com/securityalert/88
- http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.html