Lucene search
HistoryDec 06, 2010 - 1:37 p.m.
CVE-2010-4406
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.3%
Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magic_quotes_gpc is disabled, allows remote attackers to list, include, and execute arbitrary local files via a …// (dot dot slash slash) in the repertoire parameter.
Affected configurations
Node
brunettonlittlephpgalleryMatch1.0.2
Related
cvelist
cvelist
CVE-2010-4406
2010-12-04 23:00:00
prion
prion
Directory traversal
2010-12-06 13:37:00
cve
cve
CVE-2010-4406
2010-12-06 13:37:32
openvas
openvas
LittlePhpGallery 'gallery.php' Local File Include Vulnerability
2010-12-02 00:00:00
LittlePhpGallery <= 1.0.2 LFI Vulnerability
2010-12-02 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.3%
Related for NVD:CVE-2010-4406