Vulnerability Details CVE-2000-0902
getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.8%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2000-0902
-
cpe:2.3:a:nathan_purciful:phpphotoalbum:0.9.9