CVE-2006-2211

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• 321soft PHP-Gallery 0.9 - 'index.php?path' Arbitrary Directory Listing2006-05-03 · webapps · php · Verified

Impact

Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitrary directories via the path parameter.

Affected products

References

• NVD record
• CVE.org record
• http://d4igoro.blogspot.com/2006/05/321soft-php-gallery-09-directory.html
• http://secunia.com/advisories/19924
• http://www.securityfocus.com/archive/1/432964/100/0/threaded
• http://www.securityfocus.com/bid/17812
• http://www.vupen.com/english/advisories/2006/1629
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26231
• http://d4igoro.blogspot.com/2006/05/321soft-php-gallery-09-directory.html
• http://secunia.com/advisories/19924
• http://www.securityfocus.com/archive/1/432964/100/0/threaded
• http://www.securityfocus.com/bid/17812
• http://www.vupen.com/english/advisories/2006/1629
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26231