CVE:CVE-2008-1799
CNNVD:CNNVD-200804-203
sabros.us 1.75的thumbnails.php中存在目录遍历漏洞会允许远程攻击者通过img参数（该参数中包含..）来读取任意文件。
solution:Upgrade sabros.us sabros.us to a higher version than 1.75,and avoid the version 1.75