Directory traversal

2007-12-1319:46:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.035 Low

EPSS

Percentile

91.5%

JSON

Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via a … (dot dot) in the id parameter to (1) get_image.php or (2) get_file.php in mms_template/.

CPENameOperatorVersion
mms_gallery_phpeq1.0

CPE	Name	Operator	Version
	mms_gallery_php	eq	1.0

References

osvdb.org/39148

osvdb.org/39149

secunia.com/advisories/28075

www.securityfocus.com/bid/26852

exchange.xforce.ibmcloud.com/vulnerabilities/39014

www.exploit-db.com/exploits/4728