CVE-2000-0902
Published Dec 19, 2000getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Vendor archive
2 CVEs tagged to vendor nathan_purciful — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.