CVE-2009-3912

Summary

Directory traversal vulnerability in index.php in TFTgallery 0.13 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the album parameter.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://secunia.com/advisories/37156
• http://www.securityfocus.com/bid/36899
• http://packetstormsecurity.org/0911-exploits/tftgallery-traversal.txt

References

• http://secunia.com/advisories/37156
• http://www.securityfocus.com/bid/36899
• http://packetstormsecurity.org/0911-exploits/tftgallery-traversal.txt

• ←Previous
• Next→