Description
Directory traversal vulnerability in update.dpgs in Duma Photo Gallery System (DPGS) 0.99.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the id parameter.
References
- 5081 vdb-entry
- dpgs-dotdot-directory-traversal(9414) vdb-entry
- 20020622 DPGS allows any file to be overwritten mailing-list