CVE-2006-1219

🗓️ 14 Mar 2006 02:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 47 Views🌐 WEB

Directory traversal vulnerability in Gallery 2.0.3 and earlier, allowing remote attackers to include arbitrary PHP files

Reporter	Title	Published	Views	Family All 7
Tenable Nessus	Gallery < 2.0.4 Watermark Function stepOrder Parameter Local File Inclusion	13 Mar 200600:00	–	nessus
Tenable Nessus	Gallery stepOrder Parameter Local File Inclusion	10 Mar 200600:00	–	nessus
Cvelist	CVE-2006-1219	14 Mar 200602:00	–	cvelist
EUVD	EUVD-2006-1223	14 Mar 200602:00	–	euvd
NVD	CVE-2006-1219	14 Mar 200602:02	–	nvd
Prion	Directory traversal	14 Mar 200602:02	–	prion
UbuntuCve	CVE-2006-1219	14 Mar 200602:02	–	ubuntucve

NVD

Node

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/25129
securityfocus	www.securityfocus.com/bid/17051
gallery	www.gallery.menalto.com/2.0.4_and_2.1_rc_2a_update
exploit-db	www.exploit-db.com/exploits/1566
secunia	www.secunia.com/advisories/19175
vupen	www.vupen.com/english/advisories/2006/0895

Parameter	Position	Path	Description	CWE
stepOrder	query param	upgrade/index.php	Directory traversal via stepOrder allows including arbitrary PHP files in upgrade flow.	CWE-22
stepOrder	query param	install/index.php	Directory traversal via stepOrder allows including arbitrary PHP files in install flow.	CWE-22

16 Apr 2026 00:27Current

6.9Medium risk

Vulners AI Score6.9

CVSS 25

EPSS0.10277