CVE-2005-3251 - Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter

Published Oct 17, 2005

6.4

MEDIUM

CVSS 2.0

EPSS 1.90%

Description

Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://dipper.info/security/20051012/
x_refsource_MISCExploitVendor Advisory
http://gallery.menalto.com/gallery_2.0.1_released
x_refsource_CONFIRMPatch
http://secunia.com/advisories/17205
third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/88
third-party-advisoryx_refsource_SREASON
http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
http://dipper.info/security/20051012/		x_refsource_MISCExploitVendor Advisory
http://gallery.menalto.com/gallery_2.0.1_released		x_refsource_CONFIRMPatch
http://secunia.com/advisories/17205		third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/88		third-party-advisoryx_refsource_SREASON
http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.html		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 17, 2005

Updated Aug 7, 2024

Reserved Oct 17, 2005

Link CVE-2005-3251

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2005-3251

Red Hat

Severity n/a

Public date n/a

Links CVE-2005-3251