CVE-2006-1995

no score yetEPSS 4.5%

Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter, which is not properly sanitized due to an rtrim function call with the arguments in the wrong order.

EPSS: 4.5% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
Published: 2006-04-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

scry_gallery:scry_gallery

References

http://attrition.org/pipermail/vim/2006-April/000716.html
http://downloads.securityfocus.com/vulnerabilities/exploits/17649-directory-traversal.exploit
http://secunia.com/advisories/19777
http://securityreason.com/securityalert/784
http://www.osvdb.org/24889

Check your stack JSON