Unscored CVE-2000-0902 EUVD-2000-0889GHSA-cxgx-xwjv-23mh

getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Published Nov 29, 2000 · Updated Aug 8, 2024 · Assigned by mitre

Description

getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

References

20000907 Re: PhotoAlbum 0.9.9 explorer.php Vulnerability mailing-list
phpphotoalbum-getalbum-directory-traversal(5209) vdb-entry