NetSight
medium5.0

CVE-2000-0902

getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a ..

Impact

getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Affected products

VendorProductAffected versions
Nathan PurcifulPhpphotoalbum
Version 0.9.9

References