CVE-2005-3251

Опубликовано: 17 окт. 2005

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter.

Ссылки

http://dipper.info/security/20051012/
Exploit
Vendor Advisory
http://gallery.menalto.com/gallery_2.0.1_released
Patch
http://secunia.com/advisories/17205
http://securityreason.com/securityalert/88
http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.html
Vendor Advisory
http://dipper.info/security/20051012/
Exploit
Vendor Advisory
http://gallery.menalto.com/gallery_2.0.1_released
Patch
http://secunia.com/advisories/17205
http://securityreason.com/securityalert/88
http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gallery_project:gallery:2.0:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_alpha1:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_alpha2:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_alpha3:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_alpha4:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_beta1:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_beta2:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_beta3:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01598

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-3251

debian

почти 20 лет назад

Directory traversal vulnerability in the gallery script in Gallery 2.0 ...

GHSA-r859-f8rq-g2xr

github

больше 3 лет назад