Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-1995. PoCs published by Morocco Security Team.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Scry Gallery by manipulating the 'p' parameter to access arbitrary files. The PoC URL shows how an attacker can traverse directories to leak sensitive files.
Description
Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter, which is not properly sanitized due to an rtrim function call with the arguments in the wrong order.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Scry Gallery by manipulating the 'p' parameter to access arbitrary files. The PoC URL shows how an attacker can traverse directories to leak sensitive files.