Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magic_quotes_gpc is disabled, allows remote attackers to list, include, and execute arbitrary local files via a ..// (dot dot slash slash) in the repertoire parameter.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2010-12-04T23:00:00
Updated: 2010-12-10T10:00:00
Reserved: 2010-12-04T00:00:00
Link: CVE-2010-4406
JSON object: View
NVD Information
Status : Analyzed
Published: 2010-12-06T13:37:32.347
Modified: 2010-12-16T05:00:00.000
Link: CVE-2010-4406
JSON object: View
Redhat Information
No data.
CWE