CVE:CVE-2009-2922
CNNVD:CNNVD-200908-309
Pixaria Gallery 2.0.0到2.3.5版中的pixaria.image.php存在绝对路径游历漏洞。远程攻击者可以借助一个 base64-编码的文件参数，读取任意文件。
solution:Upgrade pixaria pixaria_gallery to a higher version than 2.0.0,2.3.5,and avoid the version 2.0.0,2.3.5