CVE-2008-1702: Absolute path traversal vulnerability in dload.php in the my_gallery 2.3 plugin for e107 allows remote atta...

Security readout for executives and security teams

CVE-2008-1702 is a legacy file download flaw in the my_gallery 2.3 plugin for e107. A remote attacker could abuse the download endpoint to read sensitive files by supplying an absolute file path. Business risk depends on whether this old plugin is still present and internet-accessible. Likely exposure is limited to legacy e107 sites running the my_gallery 2.3 plugin with dload.php reachable from untrusted networks. Organizations without that plugin or without public access to the endpoint are unlikely to be affected. Prioritize if any public legacy e107 site still runs my_gallery 2.3. The issue can expose sensitive server files, but the evidence bundle lacks severity scoring and active exploitation confirmation. Mitigation focus: Inventory e107 sites for the my_gallery 2.3 plugin.; Disable or remove the plugin if it is not required.; Restrict public access to dload.php where business use allows..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.