CVE-2010-2334

Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to read arbitrary files via a .. (dot dot) in the download parameter.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2010-06-18

Last modified

2024-09-16

Weaknesses

CWE-22

Affected products

• Yamamah (Yamamah)

References

• http://osvdb.org/65479
• http://secunia.com/advisories/40150
• http://www.exploit-db.com/exploits/13856
• http://www.yamamah.org/home/?page=39