CVE:CVE-2007-1124
CNNVD:CNNVD-200702-490
XeroXer Simple one-file gallery的gallery.php中存在目录遍历漏洞。远程攻击者可以通过f参数中的..，读取任意文件。
solution:Upgrade xeroxer simple_one-file_gallery to a higher version than 0.6,and avoid the version (,0.6]