CVE-2007-2643

Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter.

Affected products

Gallery, Magazin

Pinkcrow Designs Designs Gallery Magazin

= 2.0

Fix

Available

CVSS 2.0

5.0 MEDIUM

EPSS

3.7% (89th percentile)

NVD status

Modified

Published

2007-05-13