CVE-2007-1929

CVE-2007-1929 describes a directory traversal vulnerability in downloadpic.php affecting Beryo 2.0 and possibly other versions (including 2.4). The issue allows remote attackers to read arbitrary files by injecting a ".." sequence in the chemin parameter. The NVD entry lists a base score of 5.0 (...