CVE-2009-4627: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in sources/templateparser.php in Moa Gallery 1.2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the pfilename parameter, a different issue than CVE-2009-4614...