| Package | Affected versions | Patched versions |
|---|---|---|
| scry gallery | = 1.1 |
Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter, which is not properly sanitized due to an rtrim function call with the arguments in the wrong order.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free