CVE-2007-1144: Comscripts J-Web Pics Navigator

Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter.

Affected products

• Comscripts J-Web Pics Navigator: version 1.0 only; version 2.0 only

Published 2007-03-02. Last modified 2026-06-16.