CVE-2007-2642

CVE-2007-2642 describes a directory traversal vulnerability in R2K Gallery version 1.7, specifically within the galeria.php script. This flaw allows unauthenticated remote attackers to read arbitrary files on the server by manipulating the 'lang2' parameter with dot-dot-slash sequences. The vulnerability carries a high CVSS score of 7.8, indicating a critical risk due to its network-based attack vector and low attack complexity, potentially leading to complete confidentiality compromise. While it has a high FAUCET Risk Score of 95/100, its EPSS score is relatively low, suggesting a lower likelihood of exploitation in the wild compared to many other CVEs. Although not listed on the CISA KEV catalog or Hot List, an exploit for this vulnerability is publicly available on ExploitDB. Despite this, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.