CVE-2004-1407: Undefined Security Weakness

Multiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10 allow remote attackers to 1 read arbitrary files via the showThumb method for thumb.php, or 2 delete arbitrary files via admin.class.php...