Directory traversal

2008-01-0400:46:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.8%

JSON

Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read arbitrary files via a … (dot dot) in the picture parameter.

CPENameOperatorVersion
joovilile3.0.6

CPE	Name	Operator	Version
	joovili	le	3.0.6

References

osvdb.org/39666

secunia.com/advisories/28231

www.securityfocus.com/bid/27056

www.exploit-db.com/exploits/4799