CVE-2004-2222

Vulnerability

Directory traversal vulnerability in index.php of FsPHPGallery versions before 1.2 allows remote attackers to list arbitrary directories via the dir parameter. The application fails to properly sanitize user input, enabling path traversal sequences such as ../ to escape the intended gallery directory [1].

Exploitation

An attacker can exploit this by sending a crafted HTTP request to index.php with a dir parameter containing path traversal sequences (e.g., ?dir=../../etc/). No authentication is required, and the attacker only needs network access to the vulnerable web server [1].

Impact

Successful exploitation results in the disclosure of arbitrary directory listings on the server, potentially exposing sensitive files and system configuration information [1].

Mitigation

Upgrade to FsPHPGallery version 1.2 or later, where the input sanitization has been implemented to block path traversal attempts [1].