VulnerabilityModified
CVE-2006-5320
Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary files via the img parameter.
MEDIUM 5.0EPSS 3.92%
Does this matter?
Lower severity and a low EPSS score (3.92%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary files via the img parameter.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 3.92% probability · 90th percentile
- CISA KEV
- Not listed
- Affected
- morian/album photo sans nom
- Source
- cve@mitre.org
References
- http://acid-root.new.fr/poc/13061007.txtExploit
- http://secunia.com/advisories/22375Vendor Advisory
- http://www.attrition.org/pipermail/vim/2006-December/001193.html
- http://www.osvdb.org/29673
- http://www.securityfocus.com/archive/1/448096/100/0/threaded
- http://www.securityfocus.com/bid/20441
- http://www.vupen.com/english/advisories/2006/4008
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29473
- https://www.exploit-db.com/exploits/2507
- http://acid-root.new.fr/poc/13061007.txtExploit
- http://secunia.com/advisories/22375Vendor Advisory
- http://www.attrition.org/pipermail/vim/2006-December/001193.html
- http://www.osvdb.org/29673
- http://www.securityfocus.com/archive/1/448096/100/0/threaded
- http://www.securityfocus.com/bid/20441
- http://www.vupen.com/english/advisories/2006/4008
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29473
- https://www.exploit-db.com/exploits/2507
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.