CVE-2010-3456: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in EnergyScripts ES Simple Download 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...