Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.7
CVE-2017-20250: Mac Photo Gallery 3.0 allows attackers to download sensitive files
CVE-2017-20250 · published 4 months ago
Summary
An attacker can exploit a weakness in Mac Photo Gallery 3.0 to download files they shouldn't be able to access. This could expose sensitive information if the attacker knows what files to target. To stay safe, consider updating or replacing Mac Photo Gallery 3.0 with a more secure version.
Original advisory text
Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can send requests to m...
Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can send requests to macdownload.php with directory traversal sequences to access sensitive files like wp-load.php outside the intended plugin directory.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-22Path Traversal
Timeline
Published9 Jun 2026
Updated4 Nov 2026
First seen9 Jun 2026
Sources
CVE-2017-20250 · NVD
Track software like this
Free during beta