Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary files via the img parameter.
- https://www.exploit-db.com/exploits/2507
No PoCs found on GitHub currently.