Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier when register_globals is enabled allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an index of the \file\ array parameter as demonstrated by file0.