medium5.0Public exploit code
CVE-2007-5776
Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to read arbitrary files via encoded backslas…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- i-Gallery 3.4 - 'igallery.asp' Remote Information Disclosure2007-11-05 · webapps · asp · Verified
Impact
Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to read arbitrary files via encoded backslash sequences in the d parameter, as demonstrated by a "%5c../../%5c" sequence.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blue-Collar Productions | I-Gallery | Version 3.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/43628
- http://securityreason.com/securityalert/3330
- http://www.securityfocus.com/archive/1/482788/100/0/threaded
- http://www.securityfocus.com/bid/26348
- http://osvdb.org/43628
- http://securityreason.com/securityalert/3330
- http://www.securityfocus.com/archive/1/482788/100/0/threaded
- http://www.securityfocus.com/bid/26348