CVE-2010-2334

Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to read arbitrary files via a .. (dot dot) in the download parameter.

• CWE-22

• http://osvdb.org/65479
• http://secunia.com/advisories/40150Vendor Advisory
• http://www.exploit-db.com/exploits/13856Exploit
• http://www.yamamah.org/home/?page=39Patch, Vendor Advisory
• http://osvdb.org/65479
• http://secunia.com/advisories/40150Vendor Advisory
• http://www.exploit-db.com/exploits/13856Exploit
• http://www.yamamah.org/home/?page=39Patch, Vendor Advisory

Published

Jun 18, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2328The HTTP Channel in IBM WebSphere Application Server (WAS) 7…
• CVE-2010-2329Buffer overflow in Rosoft Audio Converter 4.4.4 allows remot…
• CVE-2010-2330Stack-based buffer overflow in iSharer File Sharing Wizard 1…
• CVE-2010-2331Stack-based buffer overflow in iSharer File Sharing Wizard 1…
• CVE-2010-2332Impact Financials, Inc. Impact PDF Reader 2.0, 1.2, and othe…
• CVE-2010-2333LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0…
• CVE-2010-2335SQL injection vulnerability in index.php in Yamamah Photo Ga…
• CVE-2010-2336index.php in Yamamah Photo Gallery 1.00 allows remote attack…
• CVE-2010-2337Open redirect vulnerability in RSA Federated Identity Manage…
• CVE-2010-2338Multiple SQL injection vulnerabilities in redir.asp in VU We…
• CVE-2010-2339SQL injection vulnerability in admin/pages.php in Subdreamer…
• CVE-2010-2340SQL injection vulnerability in members.php in Arab Portal 2.…