My Album Online 1.0 Directory Traversal

download product:
http://downloads-zdnet.com.com/My-Album-Online/3000-2186_2-10419797.html

Release Date:
17/12/2005

Severity:
low

Description:
My Album Online make your computer become an album server easily, let you show your individual album to
whole world in Internet. My Album Online is simple and easy to use, so long as your computer connects Internet,
your friends can appreciate your excellent picture in any place. This procedure show your album to Internet in 
your computer, does not need to buy the website space.


Vulnerability details:
A directory traversal exists in My Album Online 1.0 that can be exploited to access arbitrary files outside 
the configured directory via directory traversal attacks using ".../.../" sequences.

credit:
dr_insane