Description
The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine the existence of arbitrary directories via ".." sequences in the album parameter, which generates different error messages depending on whether the directory exists or not.
Exploits (1)
Scores
EPSS
0.0696
EPSS Percentile
91.5%
Details
Status
published
Products (1)
ids/ids
0.8.1
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026