Directory traversal vulnerability in index.php in FsPHPGallery before 1.2 allows remote attackers to list arbitrary directories via the dir parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/17950
http://www.securityfocus.com/bid/11594
http://securitytracker.com/id?1012063