CVE-2008-5752

CVE-2008-5752 affects the WordPress Page Flip Image Gallery plugin (versions up to 0.2.2). The vulnerability is a directory traversal in getConfig.php that, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a ".." payload in the book_id parameter. Root cause i...