Gli script PHP Mall Medical Store Script 3.0.3 permette Path Traversal navigando alla directory padre di un jpg o PNG.
https://hackingvila.wordpress.com/2019/02/24/php-scripts-mall-medical-store-script-3-0-3-has-path-traversal/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9607