J-Web Pics Navigator Jwpn-Photos.PHP Directory Traversal Vulnerability

Bugtraq ID:	22681
Class:	Input Validation Error
CVE:	CVE-2007-1144
Remote:	Yes
Local:	No
Published:	Feb 22 2007 12:00AM
Updated:	May 12 2015 07:34PM
Credit:	sn0oPy is credited with the discovery of this vulnerability.
Vulnerable:	comscripts.com J-Web Pics Navigator 2.0
Not Vulnerable:

J-Web Pics Navigator Jwpn-Photos.PHP Directory Traversal Vulnerability

J-Web Pics Navigator is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve and edit the contents of arbitrary files from the vulnerable system in the context of the affected application.

J-Web Pics Navigator 2.0 is vulnerable to this issue; other versions may also be affected.

J-Web Pics Navigator Jwpn-Photos.PHP Directory Traversal Vulnerability

Attackers may exploit this vulnerability via a web client.

J-Web Pics Navigator Jwpn-Photos.PHP Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

J-Web Pics Navigator Jwpn-Photos.PHP Directory Traversal Vulnerability

References:

• J-Web Pics Navigator Homepage (ComScripts.com)