CVE-2008-3293: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the dlfilename parameter...