Directory traversal vulnerability in update.dpgs in Duma Photo Gallery System (DPGS) 0.99.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the id parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Photo_gallery_system | Duma | 0.99.4 (including) | 0.99.4 (including) |