CVE:CVE-2008-1730
CNNVD:CNNVD-200804-151
ARWScripts Gallery Script Lite (又称gallery-script-lite或Free Photo Gallery Site Script)中的download.html存在目录遍历漏洞，比如20080411，它允许远程攻击者借助路径参数中的目录遍历序列，读取任意的本地文件。
solution:Upgrade arwscripts gallery_script_lite to a higher version than *