CVE-2006-0899

Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via ".." (dot dot) sequences in the template parameter.

Date published : 2006-02-27

http://www.securityfocus.com/bid/16855

http://www.securityfocus.com/archive/1/426468/100/0/threaded