CVE-2008-1730

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/29746	Vendor Advisory
http://www.osvdb.org/44253
http://www.securityfocus.com/bid/28718
https://exchange.xforce.ibmcloud.com/vulnerabilities/41742
https://www.exploit-db.com/exploits/5419
http://secunia.com/advisories/29746	Vendor Advisory
http://www.osvdb.org/44253
http://www.securityfocus.com/bid/28718
https://exchange.xforce.ibmcloud.com/vulnerabilities/41742
https://www.exploit-db.com/exploits/5419

Configurations

Configuration 1 (hide)

cpe:2.3:a:arwscripts:gallery_script_lite:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:45

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/29746 - Vendor Advisory~~	() http://secunia.com/advisories/29746 - Vendor Advisory
References	~~() http://www.osvdb.org/44253 -~~	() http://www.osvdb.org/44253 -
References	~~() http://www.securityfocus.com/bid/28718 -~~	() http://www.securityfocus.com/bid/28718 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/41742 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/41742 -
References	~~() https://www.exploit-db.com/exploits/5419 -~~	() https://www.exploit-db.com/exploits/5419 -

Information

Published : 2008-04-11 19:05

Updated : 2024-11-21 00:45

NVD link : CVE-2008-1730

Mitre link : CVE-2008-1730

CVE.ORG link : CVE-2008-1730

JSON object : View

Products Affected

arwscripts

gallery_script_lite

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2008-1730", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-04-11T19:05:00.000", "references": [{"url": "http://secunia.com/advisories/29746", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/44253", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/28718", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41742", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/5419", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/29746", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/44253", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/28718", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41742", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/5419", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter."}, {"lang": "es", "value": "Vulnerabilidad de salto de directorio en download.html en ARWScripts Gallery Script Lite (aka gallery-script-lite o Free Photo Gallery Site Script), desde el 20080411, permite a atacantes remotos leer archivos locales de su elecci\u00f3n mediante secuencias de salto de directorio en el par\u00e1metro path."}], "lastModified": "2024-11-21T00:45:11.940", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:arwscripts:gallery_script_lite:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2095A00F-7D91-4830-938C-A9E23849922F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}