CVE-2006-5205

None

CVSS

—

EPSS

11.0%

Published

Oct 10, 2006

CISA due date

—

The record

Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, when the viewimage command in the gallery module is used.

Affected packages

Ecosystem	Package	Introduced	Fixed