Description (CNA)
Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via ".." (dot dot) sequences in the template parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/19026
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24938
- https://www.exploit-db.com/exploits/1533
- http://securityreason.com/securityalert/518
- http://retrogod.altervista.org/4images_171_adv.html
- http://www.securityfocus.com/archive/1/426468/100/0/threaded
- http://www.osvdb.org/23529
- http://www.vupen.com/english/advisories/2006/0754
- http://www.securityfocus.com/bid/16855
ADP enrichment
No English description supplied.
- http://secunia.com/advisories/19026
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24938
- https://www.exploit-db.com/exploits/1533
- http://securityreason.com/securityalert/518
- http://retrogod.altervista.org/4images_171_adv.html
- http://www.securityfocus.com/archive/1/426468/100/0/threaded
- http://www.osvdb.org/23529
- http://www.vupen.com/english/advisories/2006/0754
- http://www.securityfocus.com/bid/16855