CVE-2000-0902

MEDIUM CVSS: 5.0 Published: 2000-12-19 Modified: 2026-06-16

Description

getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Affected Platforms

Nathan Purciful Phpphotoalbum

Weakness Type

NVD-CWE-Other

References