CVE-2008-0259: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in mg/php/mgthumbs.php in minimal Gallery 0.8 allow remote attackers to read arbitrary files via a .. dot dot in the 1 thumbcat and 2 thumb parameters...