CVE-2010-2334

This exploit demonstrates a local file disclosure vulnerability in Yamamah Photo Gallery 1.00 via the 'download.php' script. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'download' parameter with directory traversal sequences.

The exploit demonstrates SQL injection and local file inclusion vulnerabilities in Yamamah 1.00. It includes functional PoC URLs for blind SQLi and arbitrary file disclosure via the 'download' parameter.