Description
Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter.
References
- http://gallery.menalto.com/gallery_2.0.1_released
- http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.html
- 17205 third-party-advisory
- http://dipper.info/security/20051012/
- 88 third-party-advisory