CVE-2009-3123: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitrary files via a .. dot dot in the image parameter...