NVD

Id
59850  
Name
CVE-2006-1128  
Description
Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows remote attackers to access and delete files by specifying the session in a cookie, which is used in constructing file paths before the session value is sanitized.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-03-09  
Modified Date
2011-03-07  
Seq
2006-1128  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307883 59850 CVE-2006-1128 20060303 Gallery 2 Multiple Vulnerabilities  View
307884 59850 CVE-2006-1128 http://gallery.menalto.com/gallery_2.0.3_released  View
307885 59850 CVE-2006-1128 1015717  View
307886 59850 CVE-2006-1128 http://www.gulftech.org/?node=research&article_id=00106-03022006  View
307887 59850 CVE-2006-1128 16948  View
307888 59850 CVE-2006-1128 ADV-2006-0813  View
307889 59850 CVE-2006-1128 gallery-sessionid-bypass-security(25118)  View

Related JVN