CVE Database
/

CVE-2006-6068

Back to search

CVE-2006-6068

Published: Nov 22, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Directory traversal vulnerability in the cached_album function in functions.php for mAlbum 0.3 and earlier allows remote attackers to list filenames of arbitrary images via a .. (dot dot) in the gal parameter to index.php.

VendorProductVersions

n/a

n/a

affected
n/a

References

20061125 mAlbum v0.3 local file inclusion
mailing-list
x_refsource_BUGTRAQ
20061120 mAlbum v0.3 Multiple vulnerabilitizzz
mailing-list
x_refsource_BUGTRAQ
ADV-2006-4641
vdb-entry
x_refsource_VUPEN
22990
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now