CVE-2009-2922

Description

Absolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0 through 2.3.5 allows remote attackers to read arbitrary files via a base64-encoded file parameter.

Affected Platforms

Weakness Type

CWE-22

References

• http://www.exploit-db.com/exploits/9257
• http://www.pixaria.com/news/article/234
• http://www.securityfocus.com/bid/35802
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51994
• http://www.exploit-db.com/exploits/9257
• http://www.pixaria.com/news/article/234