CVE-2003-1239 Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via .. specifiers in the album parameter, and the target filename in the pic paramet...
MediumCVSS 5.0
EPSS 7.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via .. specifiers in the album parameter, and the target filename in the pic parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wihphoto | = 0.86 | No fix listed |
References
- 20030223 WihPhoto (PHP) exploit mailing-list patch
- wihphoto-sendphoto-file-disclosure(11429) vdb-entry
- 20030223 WihPhoto (PHP) exploit mailing-list patch
- 6929 exploit patch vdb-entry