Directory traversal

Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via a .. dot dot in the id parameter to 1 getimage.php or 2 getfile.php in mmstemplate/...

CVE-2007-6323

Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via a .. dot dot in the id parameter to 1 getimage.php or 2 getfile.php in mmstemplate/...

CVE-2007-6323

The CVE-2007-6323 entry describes multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0, allowing remote attackers to read arbitrary files via a .. sequence in the id parameter to get_image.php or get_file.php within the mms_template directory. Affected software is MMS Gallery PHP 1...