Directory traversal vulnerability in phpspot PHP BBS PHP Image Capture BBS PHP & CSS BBS PHP BBS CE PHP_RSS_Builder and webshot dated before 20090914 allows remote attackers to read arbitrary files via unspecified vectors.