VulnerabilityModified
CVE-2005-3251
Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter.
MEDIUM 6.4EPSS 1.90%
Does this matter?
Lower severity and a low EPSS score (1.90%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 1.90% probability · 79th percentile
- CISA KEV
- Not listed
- Affected
- gallery project/gallery
- Source
- cve@mitre.org
References
- http://dipper.info/security/20051012/Exploit, Vendor Advisory
- http://gallery.menalto.com/gallery_2.0.1_releasedPatch
- http://secunia.com/advisories/17205
- http://securityreason.com/securityalert/88
- http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.htmlVendor Advisory
- http://dipper.info/security/20051012/Exploit, Vendor Advisory
- http://gallery.menalto.com/gallery_2.0.1_releasedPatch
- http://secunia.com/advisories/17205
- http://securityreason.com/securityalert/88
- http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.