Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a .. (dot dot) in the cwd parameter.Referenceshttp://www.liquidpulse.net/get.lp?id=17http://www.securityfocus.com/archive/1/261221http://www.iss.net/security_center/static/8441.phphttp://www.securityfocus.com/bid/4276