CVE-2008-1730

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-04-11 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter.

Affected products

Arwscripts Gallery Script Lite: all versions

References

http://secunia.com/advisories/29746
http://www.osvdb.org/44253
http://www.securityfocus.com/bid/28718
https://exchange.xforce.ibmcloud.com/vulnerabilities/41742
https://www.exploit-db.com/exploits/5419
http://secunia.com/advisories/29746
http://www.osvdb.org/44253
http://www.securityfocus.com/bid/28718
https://exchange.xforce.ibmcloud.com/vulnerabilities/41742
https://www.exploit-db.com/exploits/5419

Get alerted when CVE-2008-1730 or the next vulnerability affects your stack