TI-2009-02091 CVE-2009-2184 · GHSA-g347-3vm4-xrvvAbsolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host…Priority LOW 28Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files via an encoded "/" (slash) in the file parameter.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02747 · Published 2009-06-23 · No fix listed CWE-22