EIP-2026-100358
PRE-CVEi-Gallery 3.4/4.1 - 'streamfile.asp' Multiple Directory Traversal Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-100358. PoCs published by Stefano Angaran.
AI-analyzed exploit summary The provided text describes a directory traversal vulnerability in i-Gallery versions 3.4 and 4.1, allowing attackers to read arbitrary files via crafted requests with '../' sequences. No actual exploit code is present, only a description and example URL.
Description
i-Gallery 3.4/4.1 - 'streamfile.asp' Multiple Directory Traversal Vulnerabilities
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Stefano Angaran · textwebappsasp
https://www.exploit-db.com/exploits/34936
The provided text describes a directory traversal vulnerability in i-Gallery versions 3.4 and 4.1, allowing attackers to read arbitrary files via crafted requests with '../' sequences. No actual exploit code is present, only a description and example URL.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
i-Gallery 3.4, 4.1
No auth needed
Prerequisites:
Network access to the target web application
mistral-large-3 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026