CVE-2007-0616 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-0616
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-0616

Description: Directory traversal vulnerability in zen/template-functions.php in zenphoto 1.0.4 up to 1.0.6 allows remote attackers to list arbitrary directories via ".." sequences in the album parameter to index.php.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/32102 SAID Secunia Advisory: SA24026 OSVDB 33072 MISC http://www.zenphoto.org/support/topic.php?id=1146&replies=3 CONFIRM http://www.zenphoto.org/support/topic.php?id=1148 BID 22368

Return to the previous page.