CVE-2008-1702: e107 My Gallery

Medium severity, CVSS 4.3. EPSS: 5.7% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in dload.php in the my_gallery 2.3 plugin for e107 allows remote attackers to obtain sensitive information via a full pathname in the file parameter. NOTE: some of these details are obtained from third party information.

Affected products

• e107 My Gallery: version 2.3 only

Published 2008-04-08. Last modified 2026-06-16.