CVE-2009-0331

The vulnerability described across sources affects Enhanced Simple PHP Gallery (ESPG) 1.72 in the file gallery/comment.php . It is a directory traversal issue that allows remote attackers to read arbitrary files via a .. (dot dot) component in the parameter named file . The note repeatedly sugges...

ESPG (Enhanced Simple PHP Gallery) 1.72 - File Disclosure

.::ESPG 1.72 File Disclosure Vulnerability::. = Scriptname: ESPG Enhanced Simple PHP Gallery 1.72 = Vendor: http://quirm.net = Download: http://quirm.net/download/21/ = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greetings: str0ke, TheJT, Maria, Alucard, x0r32 = Vulnerable Code in...