Path Traversal in Koschtit Image Gallery

CVE-2009-1510

Multiple directory traversal vulnerabilities in KoschtIT Image Gallery 1.82 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the file parameter to (1) ki_makepic.php and (2) ki_nojsdisplayimage.php in ki_base/.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.022 (81.1th percentile) — read the EPSS interpretation.

Affected products

Koschtit Koschtit_image_gallery — versions 1.82
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)