Bug: Gphotos Directory Traversal and Cross Site Scripting ( Ascii Version )

Search:
WLB2

Gphotos Directory Traversal and Cross Site Scripting

Published
Credit
Risk
2006.05.18
Moroccan Security
Medium
CWE
CVE
Local
Remote
CWE-79
CVE-2006-2398
CVE-2006-2397
No
Yes

Details

The first vulnerability issue is due to an input validation error in "index.php" "diapo.php" and
"affich.php" scripts that do not validate "rep","image" variables, which may be exploited
to cross site scripting attacks.

http://traget/index.php?rep=[xss]

http://traget/diapo.php?rep=[xss]

http://traget/affich.php?image=[xss]

The second flaw is due to an input validation error in the "index.php" script that fails to properly validate
"rep" variable, which may be exploited to disclose the contents of arbitrary folders.

http://traget/index.php?rep=../../../

Vulnerable versions

GPhotos 1.5 and prior

Credits

Moroccan Security

Contact

[ Psych0 ] <doz(at)bsdmail(dot)com>

See this note in TXT Version

Bugtraq RSS
Bugtraq
 
REDDIT
REDDIT
 
DIGG
DIGG
 
LinkedIn
LinkedIn
 
CVE RSS
CVEMAP

Copyright 2014, cxsecurity.com
Ascii Version