Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via .. (dot dot) sequences in the template parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Image_gallery_management_system | 4images | * | 1.7.1 (including) |