CVE-2008-1730 Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitr...
MediumCVSS 5.0
EPSS 2.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arwscripts gallery script lite | All versions | No fix listed |
References
- 29746 third-party-advisory vendor-advisory
- 44253 vdb-entry
- 28718 vdb-entry
- galleryscriptlite-path-info-disclosure(41742) vdb-entry
- 5419 exploit