CVE-2007-4259

CVE-2007-4259 affects EZPhotoSales 1.9.3 and earlier. The vulnerability allows remote attackers to download arbitrary image files by either requesting a URL under OnlineViewing/galleries/ directly or by navigating the gallery UI with JavaScript disabled. The root cause is implied to be improper a...