CVE:CVE-2001-0900
CNNVD:CNNVD-200111-015
Gallery before 1.2.3版本的modules.php存在目录遍历漏洞。远程攻击者可以借助include参数的..(点点)读取任意文件。
solution:Upgrade francisco_burzi gallery to a higher version than 1.2.3,and avoid the version (,1.2.3]