CVE-2009-2925: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read arbitrary files via a .. dot dot in the TEMPLATE parameter...