CVE-2007-6323

2007-12-1319:00:00

mitre

www.cve.org

7 High

AI Score

Confidence

Low

0.035 Low

EPSS

Percentile

91.5%

JSON

Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via a … (dot dot) in the id parameter to (1) get_image.php or (2) get_file.php in mms_template/.

References

osvdb.org/39148

osvdb.org/39149

secunia.com/advisories/28075

www.securityfocus.com/bid/26852

exchange.xforce.ibmcloud.com/vulnerabilities/39014

www.exploit-db.com/exploits/4728