CVE-2007-1144 Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter.
MediumCVSS 5.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| comscripts j-web pics navigator | = 1.0 | No fix listed |
| comscripts j-web pics navigator | = 2.0 | No fix listed |
References
- forums.avenir-geopolitique.net exploit
- 33117 exploit vdb-entry
- 24273 third-party-advisory vendor-advisory
- 2340 exploit third-party-advisory
- 20070222 Pics Navigator Directory Traversal Vulnerability mailing-list
- 22681 vdb-entry
- ADV-2007-0711 vdb-entry
- picsnavigator-dir-directory-traversal(32646) vdb-entry