CVE-2008-1730

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

2.92% chance of exploitation in the next 30 days, 87th percentile

Published

2008-04-11

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/5419

Security advisories

• http://secunia.com/advisories/29746
• http://www.securityfocus.com/bid/28718

References

• CVE Record
• NVD entry