Back to search
CVE-2006-7103
Published: Mar 3, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Multiple directory traversal vulnerabilities in EZOnlineGallery 1.3 and earlier, and possibly other versions before 1.3.2 Beta, allow remote attackers to (1) determine directory existence via a ".." in the album parameter in a show_album action to (a) ezgallery.php, which produces different responses depending on existence; and read arbitrary image files via a ".." in the album or (2) image parameter to (b) image.php.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://www.ezonlinegallery.com/changelog.txt
x_refsource_CONFIRM
20763
vdb-entry
x_refsource_BID
ezonlinegallery-image-directory-traversal(29836)
vdb-entry
x_refsource_XF
20061027 MHL-2006-003 Public Advisory: "ezOnlineGallery" Multiple Security Issues
mailing-list
x_refsource_BUGTRAQ
http://www.mayhemiclabs.com/advisories/MHL-2006-003.txt
x_refsource_MISC
ezonlinegallery-ezgallery-path-disclosure(29835)
vdb-entry
x_refsource_XF
20061027 MHL-2006-003 Public Advisory: "ezOnlineGallery" Multiple Security Issues
mailing-list
x_refsource_FULLDISC
2362
third-party-advisory
x_refsource_SREASON
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now