PT-2009-5272 · Pixaria · Pixaria Gallery

Qabandi

·

CVE-2009-2922

·

Published

2009-08-21

·

Updated

2024-02-14

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Pixaria Gallery versions 2.0.0 through 2.3.5
Description: The issue allows remote attackers to read arbitrary files via a base64-encoded file parameter in the pixaria.image.php file.
Recommendations: For Pixaria Gallery versions 2.0.0 through 2.3.5, consider restricting access to the pixaria.image.php file until a patch is available. Avoid using the file parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2009-2922

Affected Products

Pixaria Gallery