Secunia

Moroccan Security Team has discovered a vulnerability and a weakness in Scry, which can be exploited by malicious people to disclose system and potentially sensitive information.

1) Input passed to the "p" parameter in index.php isn't properly sanitised before being used to generate directory listings. This can be exploited to gain directory information and to view thumbnails of image files located outside the configured image directory via directory traversal attacks.

2) It is possible to reveal the full path to the configured image directory by passing invalid values to the "p" parameter in index.php.

The vulnerability and weakness has been confirmed in version 1.1. Other versions may also be affected.

Solution
Edit the source code to ensure that input is properly sanitised.

Provided and/or discovered by
Moroccan Security Team

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area