NetSight
medium5.0

CVE-2015-4415

Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attackers to include and execute arbitrary loca…

Impact

Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) theme or (2) lang cookie parameter to AnimaGallery/.

Affected products

VendorProductAffected versions
Magnifica WebscriptsAnima Gallery
Version 2.6

Weakness classification

References