Vulnerability Details CVE-2007-0329
download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathname in the file parameter, as demonstrated by config/gallerysetup.php. NOTE: this issue might be resultant from a directory traversal vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.037
EPSS Ranking 87.5%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2007-0329
-
cpe:2.3:a:joonas_viljanen:jv2_folder_gallery:*