CVE-2007-6648 – SanyBee Gallery 0.1.1 - 'p' Local File Inclusion

https://notcve.org/view.php?id=CVE-2007-6648

Directory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter. Vulnerabilidad de salto de directorio en index.php de SanyBee Gallery 0.1.0 y 0.1.1 permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante secuencias de salto de directorio en el parámetro p. • https://www.exploit-db.com/exploits/4816 http://osvdb.org/39784 http://secunia.com/advisories/28270 http://www.securityfocus.com/bid/27072 https://exchange.xforce.ibmcloud.com/vulnerabilities/39392 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •