CVE-2006-7035
Directory traversal vulnerability in make_thumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files via ".." sequences in the imgpath parameter.
Date published : 2007-02-22
http://www.securityfocus.com/archive/1/435166/30/4680/threaded