Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can send requests to macdownload.php with directory traversal sequences to access sensitive files like wp-load.php outside the intended plugin directory.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-09 | 1 | Disclosure1 |
| 2026-07-26 | 1 | Patch1 |
🚨 HIGH severity CVE-2017-20250 (CVSS 7.5): Mac Photo Gallery 3.0 vulnerable to path traversal. Unauthenticated attackers can download arbitrary files via albid parameter manipulation in macdownload[.]php. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/IOrPWBxldJ
Post summary
The tweet announces a high‑severity path traversal flaw in Mac Photo Gallery 3.0 (CVE‑2017‑20250) and urges users to apply a patch immediately.
CVE-2017-20250 Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. A… https://www.cve.org/CVERecord?id=CVE-2017-20250
Post summary
A path traversal vulnerability (CVE-2017-20250) in Mac Photo Gallery 3.0 permits unauthenticated attackers to download arbitrary files by manipulating the albid parameter.