CVE-2007-1478

download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain script source code via the filename parameter.

Date published : 2007-03-16

http://www.securityfocus.com/bid/22989

https://www.exploit-db.com/exploits/3494