CVE

CVE-2007-2642

Date: (C)2007-05-13   (M)2023-12-22

Directory traversal vulnerability in galeria.php in R2K Gallery 1.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang2 parameter.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.8
Exploit Score: 10.0
Impact Score: 6.9
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: NONE
Availability: NONE

Reference:

http://attrition.org/pipermail/vim/2007-May/001615.html

BID-23938

SECUNIA-25261

OSVDB-36015

EXPLOIT-DB-3902

ADV-2007-1783

r2kgallery-galeria-file-include(34238)