CVE-2006-0899: 4images Image Gallery Management System

High severity, CVSS 7.5. EPSS: 10% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via ".." (dot dot) sequences in the template parameter.

Affected products

• 4images Image Gallery Management System: up to and including 1.7.1

Published 2006-02-27. Last modified 2026-06-16.