Back to search
CVE-2006-1995
Published: Apr 25, 2006
Modified: Aug 7, 2024
PUBLISHED
Description
Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter, which is not properly sanitized due to an rtrim function call with the arguments in the wrong order.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
17668
vdb-entry
x_refsource_BID
ADV-2006-1490
vdb-entry
x_refsource_VUPEN
17649
vdb-entry
x_refsource_BID
24889
vdb-entry
x_refsource_OSVDB
784
third-party-advisory
x_refsource_SREASON
scry-gallery-index-directory-traversal(25991)
vdb-entry
x_refsource_XF
20060425 Interesting Scry stuff
mailing-list
x_refsource_VIM
20060421 Scry Gallery Directory Traversal & Full Path Disclosure Vulnerabilites
mailing-list
x_refsource_BUGTRAQ
19777
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now