NVD

Id
65646  
Name
CVE-2006-7103  
Description
Multiple directory traversal vulnerabilities in EZOnlineGallery 1.3 and earlier, and possibly other versions before 1.3.2 Beta, allow remote attackers to (1) determine directory existence via a ".." in the album parameter in a show_album action to (a) ezgallery.php, which produces different responses depending on existence; and read arbitrary image files via a ".." in the album or (2) image parameter to (b) image.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2007-03-03  
Modified Date
2008-09-05  
Seq
2006-7103  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
341964 65646 CVE-2006-7103 20061027 MHL-2006-003 Public Advisory: "ezOnlineGallery" Multiple Security Issues  View
341965 65646 CVE-2006-7103 2362  View
341966 65646 CVE-2006-7103 http://www.ezonlinegallery.com/changelog.txt  View
341967 65646 CVE-2006-7103 http://www.mayhemiclabs.com/advisories/MHL-2006-003.txt  View
341968 65646 CVE-2006-7103 20061027 MHL-2006-003 Public Advisory: "ezOnlineGallery" Multiple Security Issues  View
341969 65646 CVE-2006-7103 20763  View
341970 65646 CVE-2006-7103 ezonlinegallery-ezgallery-path-disclosure(29835)  View
341971 65646 CVE-2006-7103 ezonlinegallery-image-directory-traversal(29836)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52595 JVNDB-2007-001287 EZOnlineGallery におけるディレクトリトラバーサルの脆弱性 EZOnlineGallery には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2006-7103 23205 CVE-2006-7103 65646 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001287.html 2007-03-03 2012-06-26 View