VulnerabilityModified
CVE-2007-6648
Directory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter.
MEDIUM 5.0EPSS 5.54%
Does this matter?
Lower severity and a low EPSS score (5.54%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 5.54% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- sanybee gallery/sanybee gallery
- Source
- cve@mitre.org
References
- http://osvdb.org/39784
- http://secunia.com/advisories/28270Vendor Advisory
- http://www.securityfocus.com/bid/27072Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39392
- https://www.exploit-db.com/exploits/4816
- http://osvdb.org/39784
- http://secunia.com/advisories/28270Vendor Advisory
- http://www.securityfocus.com/bid/27072Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39392
- https://www.exploit-db.com/exploits/4816
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.