CVE-2006-1995: Scry Gallery

Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter, which is not properly sanitized due to an rtrim function call with the arguments in the wrong order.

Affected products

• Scry Gallery Scry Gallery: version 1.1 only

Published 2006-04-25. Last modified 2026-06-16.