CVE-2007-0329

2007-01-1802:00:00

mitre

www.cve.org

6.4 Medium

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.2%

JSON

download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathname in the file parameter, as demonstrated by config/gallerysetup.php. NOTE: this issue might be resultant from a directory traversal vulnerability.