Secunia
Login
|
|
CVE Reference: CVE-2008-3675 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2008-3675 |
|
|
Description: Directory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote attackers to read arbitrary files via (1) a .. (dot dot) and possibly (2) a full pathname in the img parameter. NOTE: some of these details are obtained from third party information. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/44416 SREASON http://securityreason.com/securityalert/4154 SAID Secunia Advisory: SA31456 MILW0RM http://www.milw0rm.com/exploits/6235 BID 30672 |
|
| Return to the previous page. |
