CVE-2015-4415: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 theme or 2 lang cookie parameter to AnimaGallery/...