vPhoto-Album version 4.2 suffers from a local file inclusion vulnerability.