CVE-2006-1995

Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter, which is not properly sanitized due to an rtrim function call with the arguments in the wrong order.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

4.38% chance of exploitation in the next 30 days, 91th percentile

Published

2006-04-25

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://downloads.securityfocus.com/vulnerabilities/exploits/17649-directory-traversal.exp…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27724

References

• CVE Record
• NVD entry

Related

• CVE-2006-1994
• CVE-2006-1998
• CVE-2006-1993
• CVE-2006-1999
• CVE-2006-1992
• CVE-2006-20001