Directory traversal vulnerability in thumb.php in FlatNuke 2.5.3 allows remote attackers to read arbitrary images or obtain the installation path via the image parameter.
http://www.vupen.com/english/advisories/2005/0697
http://secunia.com/advisories/15603
http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256