CVE-2009-0331

The vulnerability described across sources affects Enhanced Simple PHP Gallery (ESPG) 1.72 in the file gallery/comment.php . It is a directory traversal issue that allows remote attackers to read arbitrary files via a .. (dot dot) component in the parameter named file . The note repeatedly sugges...