NetSight
IP …
medium6.4Public exploit code

CVE-2006-1128

Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows remote attackers to access and delete fi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows remote attackers to access and delete files by specifying the session in a cookie, which is used in constructing file paths before the session value is sanitized.

Affected products

VendorProductAffected versions
Gallery ProjectGallery
Versions 2.0, 2.0.1, 2.0.2, 2.0_alpha, 2.0_alpha1, 2.0_alpha2

References