Name: Raphael HUCK E-mail: raphael.huck at free.fr I've found a full path disclosure in MediaWiki, and Open Clip Art is vulnerable: http://openclipart.org/wiki/skins/Simple.deps.php I advise to check revision 19681 and patch : http://svn.wikimedia.org/viewvc/mediawiki?view=rev&revision=19681