CVE-2008-6317

MEDIUM 6.8CVE-2008-6317 · Published 27/02/2009 · updated 16/06/2026

In short

CVE-2008-6317 is a MEDIUM (CVSS 6.8) vulnerability affecting phpmygallery (phpmygallery).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpmygallery phpmygallery	`= 1.5`	No fix yet

Description

Directory traversal vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the conf[lang] parameter, a different issue than CVE-2008-6318. NOTE: this might be the same issue as CVE-2008-6316.

References

securityfocus.com/bid/32723 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/47171
exploit-db.com/exploits/7399

More vulnerabilities in phpmygallery

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free