CVE-2008-3600

2008-08-1219:41:00

CWE-22

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.017

Percentile

87.9%

JSON

Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the phpEx parameter within a modload action.

Affected configurations

Nvd

Node

menaltogalleryMatch1.5.7

menaltogalleryMatch1.6alpha3

VendorProductVersionCPE
menaltogallery1.5.7cpe:2.3:a:menalto:gallery:1.5.7:*:*:*:*:*:*:*
menaltogallery1.6cpe:2.3:a:menalto:gallery:1.6:alpha3:*:*:*:*:*:*