CVE-2006-5205: Medium severity invision power services invision gallery vulnerability
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, when the viewimage command in the gallery module is used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5205?
CVE-2006-5205 is considered a moderate severity vulnerability that allows unauthorized file access.
How do I fix CVE-2006-5205?
To fix CVE-2006-5205, upgrade to a patched version of Invision Gallery that addresses the directory traversal vulnerability.
Which versions of Invision Gallery are affected by CVE-2006-5205?
Invision Gallery versions 1.0.1, 1.3, 1.3.1, 2.0.3, 2.0.6, and 2.0.7 are affected by CVE-2006-5205.
What type of attack does CVE-2006-5205 enable?
CVE-2006-5205 enables remote attackers to perform directory traversal attacks to read arbitrary files on the server.
Where does CVE-2006-5205 occur within Invision Gallery?
CVE-2006-5205 occurs in the index.php and forum/index.php files when using the viewimage command.