Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified dot dot slash) in the file parameter, which causes a regular expression to collapse the sequences into standard ../ sequences.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Coppermine_photo_gallery | Coppermine | 1.4.4 (including) | 1.4.4 (including) |