Directory Traversal Vulnerability in WihPhoto 0.86: Arbitrary File Read

CVE-2003-1239 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via .. specifiers in the album parameter, and the target filename in the pic parameter.

Learn more about our Web Application Penetration Testing UK.