CVE-2017-20250

Name of the Vulnerable Software and Affected Versions Mac Photo Gallery version 3.0

Description A path traversal issue allows unauthenticated attackers to download arbitrary files. By manipulating the albid parameter in requests sent to the 'macdownload.php' endpoint, attackers can use directory traversal sequences to access sensitive files, such as 'wp-load.php', located outside the intended plugin directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.