Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitrary directories via the path parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/26231
http://www.vupen.com/english/advisories/2006/1629
http://www.securityfocus.com/archive/1/432964/100/0/threaded