CVE-2007-5092: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in an ACCEPTFILE array parameter to modules.php...